# AWS Audit

> Delegate the audit with scope $1 (default: full) to the `iam-auditor`

- Skill: `filipemotta/aws-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add filipemotta/aws-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/filipemotta/aws-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: filipemotta (https://skillmd.com/u/filipemotta)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/filipemotta/aws-audit

---


Delegate the audit with scope $1 (default: full) to the `iam-auditor`
subagent.

1. Confirm the session uses read-only credentials. Credentials with
   write access? Stop and warn: an audit never runs with the power to
   change things.
2. At the end, the report goes to `docs/audits/YYYY-MM-DD.md` and
   new/recurring findings to `docs/aws-audit-log.md`.
3. For each CRITICAL, open (or propose) the correction PR via IaC.
   Never fix directly in the account... even with credentials that
   would allow it.

Requires: the `iam-auditor` subagent installed in
`.claude/agents/iam-auditor.md` (available in this repository under
`subagents/`).