Aura Information Security avatar

Aura Information Security

Official

@aurainfosec · Wellington, New Zealand

0Followers
|
10Public Repos
|
29Published Skills

Offers specialized technical auditing and configuration validation for AWS cloud environments, focusing on identity, infrastructure, and network security posture.

Skills Distribution
DomainCybersecurit...Cloud Infrastructu.. (40%)Identity & Access .. (30%)Network Security A.. (30%)

Agent Skills by Aura Information Security

Showing 29 vetted skills indexed across 1 GitHub repositories.

aurainfosecaurainfosec

testssl

Probe TLS/SSL services with testssl.sh and report severity-mapped vulnerabilities.

Official
Intermediate
aurainfosecaurainfosec

pmapper

Identify IAM privilege escalation paths to administrative access in AWS accounts.

Official
Intermediate
aurainfosecaurainfosec

secrets-manager

Store, retrieve, and rotate application credentials in AWS Secrets Manager.

Official
Intermediate
aurainfosecaurainfosec

eventbridge

Configure AWS EventBridge event buses, rules, patterns, and targets.

Official
Intermediate
aurainfosecaurainfosec

cloudwatch

Automates CloudWatch alarms, metrics, logs queries, and dashboards via APIs or CLI.

Official
Intermediate
aurainfosecaurainfosec

s3

Audit AWS S3 bucket public accessibility and edge-case exposure.

Official
Advanced
aurainfosecaurainfosec

poc-generator

Generate privilege escalation proof-of-concept playbooks from confirmed AWS security findings.

Official
Intermediate
aurainfosecaurainfosec

docker

Build Docker images, run containers, and orchestrate multi-service setups with Docker Compose.

Official
Intermediate
aurainfosecaurainfosec

sns

Design and validate AWS SNS pub/sub configurations for event-driven messaging.

Official
Intermediate
aurainfosecaurainfosec

api-gateway

Automate AWS API Gateway configuration and troubleshooting for REST and HTTP APIs.

Official
Intermediate
aurainfosecaurainfosec

cross-account

Run AWS security audits across multiple accounts with credential switching.

Official
Intermediate
aurainfosecaurainfosec

cognito

Audits AWS Cognito user pool and identity configurations for security weaknesses.

Official
Intermediate
aurainfosecaurainfosec

nmap-scan

Scan specified targets with Nmap for open ports and services.

Official
Intermediate
aurainfosecaurainfosec

output

Format AWS security audit query results into two-phase responses with evidence and findings.

Official
Advanced
aurainfosecaurainfosec

prowler

Run Prowler AWS security scans and validate FAIL findings with AWS CLI evidence.

Official
Advanced
aurainfosecaurainfosec

dynamodb

Design DynamoDB schemas, indexes, and query patterns with troubleshooting guidance.

Official
Intermediate
aurainfosecaurainfosec

validation-rules

Map AWS security claim IDs to read-only CLI checks and probe procedures.

Official
Advanced
aurainfosecaurainfosec

ecs

Validate AWS ECS container security and internet exposure using API and network checks.

Official
Intermediate
aurainfosecaurainfosec

step-functions

Orchestrate AWS workflows by defining state machines with branching, concurrency, and retries.

Official
Intermediate
aurainfosecaurainfosec

sqs

Probe AWS SQS queues for unauthenticated public read and write access.

Official
Intermediate
aurainfosecaurainfosec

bedrock

Invoke AWS Bedrock foundation models for text generation and embeddings.

Official
Intermediate
aurainfosecaurainfosec

identity-blast-radius

Resolve IAM effective permissions and enumerate reachable AWS resources for blast-radius assessment.

Official
Advanced
aurainfosecaurainfosec

curl

Execute HTTP requests for API testing, debugging, and file transfers.

Official
Advanced
aurainfosecaurainfosec

iam

Diagnose AWS IAM access-control weaknesses and validate least-privilege policies.

Official
Intermediate

Frequently Asked Questions About Aura Information Security

FAQPage Schema
What specific security tasks can I perform using these capabilities?

You can conduct comprehensive AWS security audits, including IAM privilege escalation analysis, S3 bucket exposure checks, TLS/SSL service probing, and EKS cluster security validation. These capabilities enable systematic identification of misconfigurations and security weaknesses across your cloud infrastructure.

Which technical personas benefit most from these security checks?

Cloud security engineers, DevSecOps practitioners, and infrastructure auditors benefit from these capabilities. They are designed for professionals responsible for maintaining least-privilege access, hardening cloud environments, and ensuring compliance across complex, multi-account AWS architectures.

What are the prerequisites for running these security audits?

Execution requires an AWS environment with appropriate read-only IAM permissions to query resource configurations and metadata. Users must have a configured environment capable of executing standard network requests and interacting with AWS services to perform the validation checks.