aws-iam

Identify and correct IAM misconfigurations in AWS policies and role trust relationships.

Updated Jun 18, 2026

Search Tags:#security #aws #permissions #edge-cases #iam #policy

Ready to run

npx skills add https://github.com/AndreKurait/claude-marketplace-test --skill aws-iam-andrekurait

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/AndreKurait/claude-marketplace-test/tree/main/plugins/aws-core/skills/aws-iam
Command: npx skills add https://github.com/AndreKurait/claude-marketplace-test --skill aws-iam-andrekurait

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Verified corrections for IAM behaviors that AI agents frequently get wrong, helping them avoid common misconfigurations and edge cases when working with IAM, STS, and Organizations. It is not a comprehensive IAM guide; use official AWS documentation for full guidance.

Core Features & Use Cases

Edges and pitfalls coverage for policy evaluation, MFA, role trust, and service permissions with concrete examples.
Guidance that reduces misinterpretation of IAM rules during automated reasoning and policy reviews.
Practical use cases include debugging cross-account access, validating pass-through policies, and auditing role permissions.

Quick Start

Verify IAM configurations against official AWS documentation and edge-case guidance before proposing or applying any changes.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I fix common IAM policy misconfigurations and edge cases in AWS?▼

Fix IAM policy misconfigurations by verifying policy evaluation logic, MFA constraints, and role trust relationships against official AWS documentation to correct automated reasoning errors and edge cases.

Why does cross-account access fail when debugging AWS IAM role trust policies?▼

Cross-account access fails due to IAM role trust relationship misconfigurations, requiring validation of STS policy evaluation contexts and explicit permission boundaries to ensure proper cross-account simulation.

What is the best way to audit AWS IAM role permissions for service-level pitfalls?▼

Audit AWS IAM role permissions by simulating policy evaluation scenarios and checking service permissions against edge-case guidance to identify pass-through policy misinterpretations and strict verification gaps.

Can I use this to validate STS and Organizations policy evaluation contexts for MFA requirements?▼

Validate STS and Organizations policy evaluation contexts by applying strict verification against official AWS documentation to address MFA enforcement and cross-account trust edge cases during policy reviews.

How do I identify IAM pitfalls when automated policy reviews misinterpret AWS permissions?▼

Identify IAM pitfalls by cross-referencing automated policy reviews with reliable edge-case knowledge, correcting misinterpretations in policy evaluation, role trust, and service permissions before applying changes.