auditing-aws-s3-bucket-permissions

Name: auditing-aws-s3-bucket-permissions
Availability: InStock
Author: Axxxxxxaaann

Audits AWS S3 bucket configurations and outputs a structured JSON report.

Updated Aug 27, 2026

Search Tags:#aws #audit #permissions #compliance #encryption #s3 #policy

Ready to run

npx skills add https://github.com/Axxxxxxaaann/KAIRI-Skills --skill auditing-aws-s3-bucket-permissions

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auditing-aws-s3-bucket-permissions
Source: https://github.com/Axxxxxxaaann/KAIRI-Skills/tree/main/skills/auditing-aws-s3-bucket-permissions
Command: npx skills add https://github.com/Axxxxxxaaann/KAIRI-Skills --skill auditing-aws-s3-bucket-permissions

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires boto3, botocore, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Audits S3 bucket configurations to identify public access, wildcard policies, encryption gaps, and misconfigurations that risk data exposure.

Core Features & Use Cases

Scans all buckets to detect public ACLs, wildcard policies, and missing encryption
Generates a structured JSON audit report for compliance and incident response
Useful for baseline security, risk assessment, and on-demand investigations

Quick Start

Run the agent to audit all S3 buckets in the account and produce a structured JSON report.

Frequently Asked Questions about auditing-aws-s3-bucket-permissions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit S3 bucket permissions at scale across an AWS account?▼

You can audit S3 bucket permissions by scanning all buckets for public ACLs, wildcard policies, and missing encryption, then generating a structured JSON audit report for compliance and incident response.

What does an S3 bucket security audit check for?▼

An S3 bucket security audit checks public access blocks, ACLs, bucket policies with wildcard principals, encryption, versioning, and logging to identify misconfigurations and data exposure risks.

Can I audit a single targeted S3 bucket instead of the whole account?▼

Yes, the audit applies to both account-wide security assessments across all buckets and targeted bucket investigations for baseline configurations and incident-response scenarios.

Do I need boto3 to check S3 bucket encryption and public access settings?▼

Yes, this audit requires the boto3 and botocore dependencies to interact with AWS APIs for checking S3 bucket encryption, public access blocks, and policy configurations.

How do I get a compliance report for S3 public access and wildcard policies?▼

Run the audit agent to produce a structured JSON compliance report detailing S3 public access configurations, wildcard policies, encryption gaps, and misconfigurations for risk assessment.

What is the best way to find misconfigured S3 buckets during an incident response?▼

Run an audit to identify misconfigured S3 buckets during incident response by checking public access blocks, ACLs, wildcard policies, and encryption gaps, producing a structured JSON report of exposure risks.