skills.rest
MassimilianoPili
MassimilianoPiliCOMMUNITY
Explore all skills by this author →
GitHub

aws-cloudformation-security

Generate AWS CloudFormation templates with KMS encryption and secure IAM policies.

Updated Mar 2, 2026
Search Tags:#security#aws#cloudformation#encryption#iam#kms#secrets manager
One-click install
npx skills add https://github.com/MassimilianoPili/claude-code-config --skill aws-cloudformation-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-cloudformation-security
Source: https://github.com/MassimilianoPili/claude-code-config/tree/main/skills/aws-cloudformation-security
Command: npx skills add https://github.com/MassimilianoPili/claude-code-config --skill aws-cloudformation-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you create secure AWS infrastructure by providing best practices and reusable patterns for CloudFormation templates, focusing on encryption, secrets management, and access control.

Core Features & Use Cases

  • Secure Resource Configuration: Implement encryption for data at rest and in transit using AWS KMS and Secrets Manager.
  • Least Privilege IAM: Define granular IAM policies to ensure only necessary permissions are granted.
  • Network Security: Configure secure VPCs, security groups, and network access controls.
  • Use Case: When deploying a new microservice, use this Skill to generate a CloudFormation template that includes encrypted databases, secure API key management, and strictly defined network access rules.

Quick Start

Use the aws-cloudformation-security skill to generate a CloudFormation template for a secure S3 bucket with KMS encryption.

Frequently Asked Questions about aws-cloudformation-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a secure AWS CloudFormation template with KMS encryption?▼

To create a secure AWS CloudFormation template with KMS encryption, use this skill to generate reusable patterns that configure data-at-rest encryption and manage keys. It provides best practices for integrating KMS directly into your infrastructure deployments.

What is the best way to implement least privilege IAM policies in CloudFormation?▼

Implementing least privilege IAM policies in CloudFormation involves defining granular permissions that grant only necessary access. This skill provides secure IAM policy patterns to ensure your infrastructure deployments enforce strict access control.

Can I use CloudFormation to manage AWS Secrets Manager for secure API keys?▼

Yes, you can use CloudFormation to manage AWS Secrets Manager for secure API keys. This skill supplies template patterns for secure secrets management, allowing you to securely provision and reference API keys within your cloud infrastructure.

Does this approach support defense-in-depth strategies for VPC security groups?▼

Yes, this approach supports defense-in-depth strategies for VPC security groups. It provides CloudFormation patterns to configure secure VPCs, network access controls, and TLS/SSL configurations for robust cloud infrastructure deployments.

When do I need to configure TLS/SSL configurations in my CloudFormation templates?▼

You need to configure TLS/SSL configurations in your CloudFormation templates when securing data in transit. This skill provides the necessary patterns to enforce encryption across your network communications during infrastructure deployment.

Related Skills

Explore More Software Engineering Skills→
MassimilianoPiliMassimilianoPili

aws-cloudformation-vpc

Generate AWS CloudFormation templates for VPC infrastructure with subnets and gateways.

Community
Advanced
zzw4257zzw4257

Checkov

Scan infrastructure-as-code files for security vulnerabilities and compliance deviations.

Community
Intermediate
YukiIto1999YukiIto1999

securing-aws-lambda-execution-roles

Audit AWS Lambda execution roles and generate least-privilege IAM policies.

Community
Advanced
neverinfamousneverinfamous
19

aws

Guide secure AWS infrastructure design across IAM, S3, Lambda, EC2, and VPC.

Community
Advanced