Identify IAM over-privilege, network misconfigurations, and weak data protections in AWS environments.
npx skills add https://github.com/curphey/bosun --skill aws-curphey
Please help me install this Agent Skill. Skill: aws Source: https://github.com/curphey/bosun/tree/main/skills/aws Command: npx skills add https://github.com/curphey/bosun --skill aws-curphey
Identify AWS infrastructure misconfigurations that expose data, grant excessive permissions, or allow unauthorized access, helping teams reduce security risk and compliance gaps.
Run a security assessment of your AWS environment and receive prioritized findings.
High-intent search queries and answers about installing and using this skill.
To check AWS IAM over-privilege and privilege escalation risks, assess role scoping to enforce least privilege. This validates permissions and identifies excessive access in your environment, reducing unauthorized control-plane exposure.
Auditing VPC network boundaries and security group exposure requires analyzing misconfigured network rules. Reviewing segmentation and exposure checks identifies unauthorized access paths and reduces external attack surface risks.
Verifying AWS encryption at rest and in transit involves reviewing data protection configurations. Checking secrets management and key management ensures sensitive data remains secured and compliant with protection standards.
Yes, AWS security audits support integration with common scanners like Prowler and Checkov. This integration automates the identification of misconfigurations and prioritizes findings across cloud environments.
Yes, this AWS security review approach applies to environments ranging from small teams to large enterprise deployments. It guides security reviewers through role scoping, network segmentation, and encryption checks regardless of scale.
Prioritizing IAM least privilege validation before network boundary checks secures identity access first. Resolving excessive permissions early prevents lateral movement and escalations from exploiting misconfigured network boundaries later.
mauriciodelrioConfigure AWS VPCs, subnets, security groups, WAF, and IAM least privilege.
foutoucourAudit cloud infrastructure configurations for security misconfigurations and exposure.
ancolemanAutomate security hardening across OS, containers, cloud, network, and databases.
4lermanCheck cloud configurations for security misconfigurations across AWS, Azure, and GCP.
