skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

aws-iam-enum

Enumerate AWS IAM policies and detect privilege escalation paths.

7|1|Updated Apr 14, 2026
Search Tags:#security audit#AWS#IAM#privilege escalation#enumerate
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill aws-iam-enum
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-iam-enum
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/Decepticon/skills/cloud/aws-iam-enum
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill aws-iam-enum

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of enumerating AWS IAM policies and detecting potential privilege escalation paths, saving time and reducing manual effort.

Core Features & Use Cases

  • AWS IAM Enumeration: List and analyze IAM policies and roles for a user.
  • Privilege Escalation Detection: Identify potential paths for privilege escalation based on Rhino Security Labs' canonical 21 primitives.
  • Use Case: When auditing an AWS account, this Skill can quickly reveal if any of the default or custom IAM policies pose a risk to the account's security posture.

Quick Start

Use the aws-iam-enum skill to enumerate the IAM policies for the current user and detect potential privilege escalation paths.

Frequently Asked Questions about aws-iam-enum

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect AWS IAM privilege escalation paths during a security audit?▼

Detect AWS IAM privilege escalation paths by enumerating policies and roles to identify risks based on Rhino Security Labs' 21 primitives. This automates the analysis of IAM configurations for security audits.

How do I enumerate AWS IAM policies for a specific user?▼

Enumerate AWS IAM policies for a user by running automated scripts that list and analyze roles and policy configurations. This requires AWS credentials and access to the AWS API to function.

Do I need the AWS CLI to enumerate IAM policies and roles?▼

Yes, you need the AWS CLI installed and configured with valid AWS credentials. The Skill uses these dependencies to access the AWS API and enumerate IAM policies and roles.

What are the 21 primitives used for AWS IAM privilege escalation detection?▼

The 21 primitives are canonical privilege escalation techniques identified by Rhino Security Labs. The Skill checks IAM policies against these known primitives to detect potential escalation paths.

Can I use this Skill to review custom IAM policies for security risks?▼

Yes, you can use this Skill to review both default and custom IAM policies. It analyzes policy configurations to reveal risks to the account's security posture during IAM configuration reviews.

What are the limitations of automating IAM privilege escalation detection?▼

Automated IAM privilege escalation detection is limited to the 21 canonical primitives and requires valid AWS API access. It does not cover novel escalation techniques outside the established primitive framework.

Related Skills

Explore More Software Engineering Skills→
david-2814david-2814
3

s3

Automate S3 bucket, object, lifecycle, and access-control management via AWS CLI.

Community
Intermediate
woohyun212woohyun212
21

cloud-pentest

Assess AWS, Azure, and GCP security posture with ScoutSuite and Prowler audits.

Community
Advanced
jayjpatel9717jayjpatel9717

cloud-security-orchestration

Orchestrate cloud security assessments across AWS, Azure, and GCP.

Community
Advanced
hardw00thardw00t
90

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

Community
Advanced