Generate least-privilege AWS IAM policies, roles, users, and permission boundaries.
npx skills add https://github.com/sitharaj88/claude-skills --skill aws-iam-sitharaj88
Please help me install this Agent Skill. Skill: aws-iam Source: https://github.com/sitharaj88/claude-skills/tree/main/skills/aws-iam Command: npx skills add https://github.com/sitharaj88/claude-skills --skill aws-iam-sitharaj88
This Skill helps users configure AWS Identity and Access Management (IAM) resources, ensuring least-privilege access and robust security for cloud infrastructure.
Use the aws-iam skill to generate a least-privilege IAM policy for a Lambda function that needs to read from an S3 bucket named 'my-data-bucket'.
High-intent search queries and answers about installing and using this skill.
To create an IAM policy for Lambda, you define specific actions like s3:GetObject and scope them to the exact resource ARN of your S3 bucket. This enforces least-privilege access by granting only the permissions required to read the data.
Configuring least-privilege IAM roles for EC2 or ECS requires specifying exact AWS service actions and resource ARNs rather than using wildcards. This approach limits the principal's permissions to only what is necessary for its operational tasks.
You enforce MFA in an AWS IAM security policy by adding condition keys like aws:MFA to the policy statement. This requires users to authenticate with multi-factor authentication before accessing the specified AWS resources.
Yes, you can restrict IAM role trust policies using the aws:PrincipalOrgID condition key. This limits cross-account role assumption to principals within your AWS Organization, securing access across multiple accounts.
Setting permission boundaries for human users in AWS IAM involves attaching a managed policy that defines the maximum allowed permissions. This ensures users cannot escalate privileges beyond their defined boundary even if granted broader access.
Yes, this approach supports configuring IAM permissions for CloudWatch logging by generating policies with actions like logs:CreateLogGroup. It scopes these permissions to the specific CloudWatch resource ARNs needed for the service principal.
subhamay-bhattacharyyaCreate and validate AWS IAM policies for Snowflake data lake access.
YukiIto1999Audit AWS Lambda execution roles and generate least-privilege IAM policies.
balsm-healthSecure AWS Lambda execution roles with least-privilege IAM policies and permission boundaries.
abhijeetkakade1234Audit cloud IAM policies for privilege escalation vectors across AWS, GCP, and Azure.
