aws

Identify IAM over-privilege, network misconfigurations, and weak data protections in AWS environments.

Updated Aug 23, 2026

Search Tags:#aws #encryption #iam #vpc #cloud-security #security-audits

Ready to run

npx skills add https://github.com/curphey/bosun --skill aws-curphey

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws
Source: https://github.com/curphey/bosun/tree/main/skills/aws
Command: npx skills add https://github.com/curphey/bosun --skill aws-curphey

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Identify AWS infrastructure misconfigurations that expose data, grant excessive permissions, or allow unauthorized access, helping teams reduce security risk and compliance gaps.

Core Features & Use Cases

IAM least-privilege validation and privilege-escalation risk assessment
Network boundary analysis including security group, VPC, and exposure checks
Data protection review covering encryption at rest and in transit, secrets management, and key management

Quick Start

Run a security assessment of your AWS environment and receive prioritized findings.

Frequently Asked Questions about aws

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check my AWS environment for IAM over-privilege and privilege escalation risks?▼

To check AWS IAM over-privilege and privilege escalation risks, assess role scoping to enforce least privilege. This validates permissions and identifies excessive access in your environment, reducing unauthorized control-plane exposure.

What is the best way to audit VPC network boundaries and security group exposure in AWS?▼

Auditing VPC network boundaries and security group exposure requires analyzing misconfigured network rules. Reviewing segmentation and exposure checks identifies unauthorized access paths and reduces external attack surface risks.

How do I verify encryption at rest and in transit for AWS data protection compliance?▼

Verifying AWS encryption at rest and in transit involves reviewing data protection configurations. Checking secrets management and key management ensures sensitive data remains secured and compliant with protection standards.

Can I integrate AWS security audits with infrastructure scanners like Prowler and Checkov?▼

Yes, AWS security audits support integration with common scanners like Prowler and Checkov. This integration automates the identification of misconfigurations and prioritizes findings across cloud environments.

Does this AWS security review approach work for large enterprise deployments?▼

Yes, this AWS security review approach applies to environments ranging from small teams to large enterprise deployments. It guides security reviewers through role scoping, network segmentation, and encryption checks regardless of scale.

Why should I prioritize IAM least privilege validation before running network boundary checks?▼

Prioritizing IAM least privilege validation before network boundary checks secures identity access first. Resolving excessive permissions early prevents lateral movement and escalations from exploiting misconfigured network boundaries later.