skills.rest
BagelHole
BagelHoleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

aws-iam

Manage AWS IAM users, roles, and policies with least-privilege access.

46|4|Updated Jan 27, 2026
Search Tags:#aws#access control#iam#roles#policies#identity management
One-click install
npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill aws-iam-bagelhole
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/tree/main/infrastructure/cloud-aws/aws-iam
Command: npx skills add https://github.com/BagelHole/DevOps-Security-Agent-Skills --skill aws-iam-bagelhole

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the complexity of managing AWS Identity and Access Management (IAM) by providing tools and best practices for creating and configuring users, roles, and policies, ensuring adherence to the principle of least privilege.

Core Features & Use Cases

  • IAM Policy Management: Define and apply JSON policies for granular access control.
  • Role Creation & Attachment: Create IAM roles with trust policies and attach managed or inline policies.
  • Service-Linked Roles: Facilitate the creation of roles for AWS services.
  • Use Case: When setting up a new EC2 instance that needs read-only access to an S3 bucket, you can use this Skill to create a specific IAM role with the necessary permissions and attach it to the instance.

Quick Start

Use the aws-iam skill to create a role named EC2AppRole with a trust policy allowing EC2 to assume it.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an IAM role with a trust policy for an EC2 instance?▼

To create an IAM role with a trust policy, you define the trust relationship allowing EC2 to assume it and attach specific permissions. This Skill configures IAM roles with JSON policies to grant granular access control to AWS resources.

How do I apply least-privilege access control to AWS identities?▼

Applying least-privilege access control involves defining granular JSON policies that grant only necessary permissions. This Skill manages AWS IAM users and roles, ensuring security best practices by attaching these restricted policies to specific identities.

What is the best way to configure service-linked roles for AWS services?▼

Configuring service-linked roles involves creating IAM roles specifically tailored for AWS services to interact securely with other resources. This Skill facilitates the creation of these roles while adhering to IAM security and auditing best practices.

Do I need AWS CLI to manage IAM policies and roles?▼

Yes, you need AWS CLI installed and configured to execute IAM management tasks. This Skill requires the AWS CLI for execution to create users, define roles, and apply JSON policies for identity and access management.

How do I grant an EC2 instance read-only access to an S3 bucket?▼

Granting EC2 read-only S3 access requires creating a specific IAM role with the necessary permissions and attaching it to the instance. This Skill creates IAM roles with precise JSON policies to implement secure resource access.

Related Skills

Explore More Software Engineering Skills→
andisabandisab

aws-cli

Manage AWS infrastructure via AWS CLI commands for provisioning and automation.

Community
Advanced
mreferremreferre

setting-up-ec2-instance-profiles

Create IAM roles and instance profiles for EC2 to access AWS services.

Community
Advanced
AcczdyAcczdy
2

implementing-aws-iam-permission-boundaries

Audit AWS IAM roles and generate permission boundary policies.

Community
Intermediate
thehivegroup-aithehivegroup-ai

aws-infra-standards

Review AWS infrastructure plans and CloudFormation templates for deployment readiness.

Official
Intermediate