aws-iam

Verify IAM edge-case claims against official AWS documentation.

2.3k|234|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/aws/agent-toolkit-for-aws --skill aws-iam-aws
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-core/skills/aws-iam
Command: npx skills add https://github.com/aws/agent-toolkit-for-aws --skill aws-iam-aws

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Correct IAM behavior misconceptions and edge cases for AI agents, helping avoid common mistakes in policy evaluation, trust policies, and MFA handling.

Core Features & Use Cases

  • Verified edge cases across CloudTrail, STS, Organizations, MFA, SAML, and policy evaluation.
  • Guidance to verify claims against official AWS documentation and avoid relying on memory.
  • Use cases include debugging IAM questions, auditing policies, and validating trust and permission boundaries.

Quick Start

Ask IAM questions and have the system verify edge-case claims against official AWS docs before replying.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does AWS IAM policy evaluation work in complex edge cases?

AWS IAM policy evaluation determines access by assessing explicit denies, permission boundaries, and trust policies. This Skill verifies complex IAM policy evaluation edge cases against official AWS documentation to prevent common access control mistakes.

Why does my IAM role trust policy fail to grant access across AWS Organizations?

IAM role trust policies often fail across AWS Organizations due to missing service control policies or incorrect principal configurations. This Skill corrects IAM behavior misconceptions by validating trust policy and Organizations edge cases against official AWS documentation.

How do I properly configure MFA conditions in AWS STS sessions?

Configuring MFA conditions in AWS STS sessions requires validating the MultiFactorAuthPresent condition key and session duration policies. This Skill provides verified edge-case guidance for MFA handling and STS scenarios to ensure governance-aligned answers.

Can I use this Skill to audit IAM permissions and validate trust boundaries?

Yes, you can use this Skill to audit IAM permissions and validate trust boundaries. It provides verified edge cases across policy evaluation, STS, Organizations, MFA, and SAML to debug IAM questions and validate permission boundaries accurately.

What are common IAM limitations when debugging SAML federation and CloudTrail logs?

Common IAM limitations when debugging SAML federation and CloudTrail logs involve misconfigured role mappings and incomplete audit trail visibility. This Skill addresses these edge cases by verifying claims against official AWS documentation to avoid relying on memory.