skills.rest
mreferre
mreferreCOMMUNITY
Explore all skills by this author →
Website𝕏@mreferreGitHub

aws-iam

Diagnose AWS IAM authorization failures and apply verified policy fixes.

Updated May 12, 2026
Search Tags:#aws#iam#organizations#security auditing#policy evaluation#sts#trust policy
One-click install
npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill aws-iam-mreferre
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/mreferre/aws-agent-toolkit-skills/tree/main/.kiro/skills/aws-iam
Command: npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill aws-iam-mreferre

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AWS IAM troubleshooting is error-prone because agents frequently mis-handle policy evaluation edge cases, trust-policy nuances, and STS/Organizations constraints, leading to incorrect or unsafe authorization recommendations.

Core Features & Use Cases

  • Verified IAM/POLICY edge-case corrections for common failure modes in role trust, session behavior, and Organizations/SAML/MFA details.
  • Policy evaluation guidance for tricky condition logic (including vacuous truth patterns) and privilege-escalation gotchas such as unsafe PassRole usage.
  • Operational debugging support for IAM events and service-specific trust requirements, including CloudTrail interpretation and SigV4 diagnosis.

Quick Start

Use the aws-iam skill to diagnose why an AssumeRole attempt fails and which IAM/STS/Organizations or trust-policy constraint is most likely causing the issue.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does my AWS IAM AssumeRole attempt fail even when the policy seems correct?▼

AWS IAM AssumeRole failures often stem from trust-policy nuances, STS constraints, or Organizations service control policies. This skill diagnoses these edge cases by applying verified policy evaluation rules to pinpoint the exact authorization behavior blocking role assumption.

How do I fix IAM policy evaluation issues with ForAllValues and Null condition patterns?▼

Fixing IAM policy evaluation issues with ForAllValues and Null patterns requires understanding vacuous truth logic. This skill provides authoritative edge-case rules to correct tricky condition logic and ensure your IAM policies enforce the intended security scope safely.

What is the best way to audit IAM roles for unsafe PassRole privilege escalation risks?▼

Auditing IAM roles for unsafe PassRole privilege escalation requires reviewing policy logic for delegation gotchas. This skill evaluates your IAM policies against verified escalation conditions to identify and tighten security gaps in role trust configurations.

Does this skill help with debugging STS and SAML MFA constraints in AWS IAM?▼

Yes, this skill supports operational debugging for STS and SAML MFA constraints within AWS IAM. It interprets CloudTrail events and SigV4 diagnoses to resolve service-specific trust requirements and correct IAM delegation behavior.

Can I use this to review IAM trust policies across my AWS Organizations environment?▼

Yes, you can use this skill to review IAM trust policies across an AWS Organizations environment. It resolves STS and Organizations edge cases to ensure your IAM authorization behavior correctly applies security auditing and MFA constraints.

Related Skills

Explore More Legal & Compliance Skills→
mashharukimashharuki
2

aws-iam

Review IAM policy evaluation, trust relationships, and STS session edge cases.

Community
Advanced
seandkendallseandkendall
7

aws-iam

Fix AWS IAM policy, trust, and permission errors for secure access control.

Community
Advanced
AndreKuraitAndreKurait

aws-iam

Identify and correct IAM misconfigurations in AWS policies and role trust relationships.

Community
Advanced
jassicsjassics
6

cloud-iam-review

Audit AWS, Azure, and GCP IAM configurations for least privilege risks.

Community
Advanced