Packs
3 packs@itsmostafa
AWS Agent Skills
AWS Agent Skills from itsmostafa/aws-agent-skills.
18 skills · pack
curated
Cloud & DevOps
Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.
24 skills · pack
@pwdev-solucoes
Pwdev Devops
DevOps com execução segura v1.0 — leitura livre, mutação sob confirmação por comando, destrutivo bloqueado por guard script; 19 skills (AWS, Kubernetes, Docker, Linux, Nginx, PostgreSQL, observabilidade, incidente, segurança, Proxmox, automação, performance, backup, Laravel, confiabilidade, FinOps, IA, documentação) e 4 subagentes
19 skills · pack
Results for “aws”
95 skills
pwdev-solucoes aws-architect
Diagnoses AWS architecture issues and reviews Well-Architected pillars using read-only AWS CLI commands, with confirmation required for any changes.
2
mukul975 securing-aws-iam-permissions
Hardens AWS IAM configurations to enforce least privilege access across cloud accounts, covering policy scoping, permission boundaries, Access Analyzer integration, and credential rotation.
24.6k · bundle
cloudthinker-ai aws-guardduty
Analyze AWS GuardDuty findings, detectors, suppression rules, and member accounts with parallel execution and anti-hallucination guardrails.
7
mukul975 exploiting-aws-with-pacu
Use Pacu modules for AWS privilege escalation, persistence, and backdooring during authorized penetration tests.
24.6k · bundle
mukul975 performing-aws-account-enumeration-with-scout-suite
Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.
24.6k · bundle
loopyluci aws-security
Provides a structured approach to designing, implementing, and troubleshooting AWS security configurations with best practices and verification checklists.
1
More results
mukul975 auditing-aws-s3-bucket-permissions
Audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, Prowler, and IAM Access Analyzer.
24.6k · bundle
github aws-resource-health-diagnose
Analyze AWS resource health, diagnose issues from CloudWatch logs and metrics, and create a remediation plan for identified problems.
36.2k
luokai0 cognito
Builds, configures, and manages AWS Cognito user pools, identity pools, authentication flows, and integrations with other AWS services.
10 · bundle
cloudthinker-ai aws-waf
Analyzes AWS WAF web ACLs, rules, IP sets, and logging configurations, and retrieves blocked/allowed request metrics from CloudWatch.
7
mukul975 performing-cloud-native-threat-hunting-with-aws-detective
Hunt for threats in AWS environments using Detective behavior graphs, entity investigation timelines, GuardDuty finding correlation, and automated entity profiling across IAM users, EC2 instances, and IP addresses.
24.6k · bundle
mukul975 implementing-aws-config-rules-for-compliance
Deploy AWS Config rules for continuous compliance monitoring, including managed and custom rules aligned to CIS and PCI DSS frameworks, automatic remediation with SSM Automation, and multi-account compliance aggregation.
24.6k · bundle
github aws-well-architected-review
Reviews AWS infrastructure as code and deployed resources against the Well-Architected Framework, generating findings and GitHub issues for remediation.
36.2k
mukul975 securing-aws-lambda-execution-roles
Audit and harden AWS Lambda execution roles by implementing least-privilege IAM policies, permission boundaries, and SCP enforcement.
24.6k · bundle
mukul975 implementing-aws-iam-permission-boundaries
Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.
24.6k · bundle
mukul975 performing-cloud-forensics-with-aws-cloudtrail
Investigate AWS account compromises by querying CloudTrail logs to reconstruct attacker activity, identify compromised credentials, and analyze API call patterns.
24.6k · bundle
mukul975 detecting-aws-credential-exposure-with-trufflehog
Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.
24.6k · bundle
mukul975 performing-aws-privilege-escalation-assessment
Identify and test IAM misconfigurations that allow privilege escalation in AWS environments using Pacu, CloudFox, Principal Mapper, and manual analysis.
24.6k · bundle
mukul975 implementing-aws-nitro-enclave-security
Builds AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration, and secure vsock communication for processing sensitive data.
24.6k · bundle
mukul975 implementing-aws-security-hub
Deploy AWS Security Hub as a centralized cloud security posture management platform, aggregate findings from GuardDuty, Inspector, Macie, and third-party tools, enable security standards, configure automated remediation, and build compliance dashboards across multi-account AWS organizations.
24.6k · bundle
mukul975 securing-api-gateway-with-aws-waf
Protect API Gateway endpoints with AWS WAF by configuring managed rule groups, rate limiting, bot control, IP reputation filtering, and monitoring.
24.6k · bundle
mukul975 detecting-aws-iam-privilege-escalation
Identify AWS IAM privilege escalation paths by analyzing policies for dangerous permission combinations and least-privilege violations using boto3 and Cloudsplaining-style analysis.
24.6k · bundle
itsmostafa api-gateway
Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.
1.1k · bundle
cloudthinker-ai aws-cloudtrail
Analyzes AWS CloudTrail events and trails, including trail health, API activity, security investigations, resource changes, and event selector audits, with parallel execution and anti-hallucination guardrails.
7
mukul975 implementing-aws-security-hub-compliance
Aggregate security findings across AWS accounts, enable compliance standards like CIS and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
24.6k · bundle
cloudthinker-ai aws-cognito
Analyzes AWS Cognito user pools and identity pools, covering authentication flows, MFA status, app client configuration, password policy, Lambda triggers, and federation setup.
7
cloudthinker-ai aws-s3
Analyzes AWS S3 buckets for storage class distribution, lifecycle policies, access patterns, and cost optimization, including security posture checks like encryption and public access.
7
mukul975 detecting-aws-guardduty-findings-automation
Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.
24.6k · bundle
mukul975 implementing-envelope-encryption-with-aws-kms
Encrypt large data volumes locally using envelope encryption with AWS KMS, generating data keys and managing encrypted keys alongside ciphertext.
24.6k · bundle
shulkwisec aws-metadata-ssrf
Exploit SSRF vulnerabilities in AWS EC2-hosted applications to extract IAM credentials and User Data from the Instance Metadata Service, including techniques for bypassing basic filters against IMDSv1.
21 · bundle
mukul975 configuring-aws-verified-access-for-ztna
Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.
24.6k · bundle
itsmostafa secrets-manager
Store, retrieve, and automatically rotate credentials, API keys, and other secrets using AWS Secrets Manager.
1.1k · bundle
mukul975 detecting-aws-cloudtrail-anomalies
Query AWS CloudTrail events with boto3, build statistical baselines of normal API activity, and detect anomalies such as unusual event sources, geographic anomalies, high-frequency API calls, and first-time API usage patterns.
24.6k · bundle
mukul975 enumerating-cloud-with-cloudfox
Map AWS and Azure attack paths and find exploitable misconfigurations with CloudFox.
24.6k · bundle
mukul975 remediating-s3-bucket-misconfiguration
Identify and remediate Amazon S3 bucket misconfigurations that expose sensitive data, including enabling Block Public Access, auditing policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation with AWS Config and Lambda.
24.6k · bundle
mukul975 performing-cloud-forensics-investigation
Collect and analyze logs, snapshots, and metadata from AWS, Azure, and GCP to investigate security breaches in cloud environments.
24.6k · bundle