aws-security-audit

Audit AWS environments for security misconfigurations and compliance gaps.

Updated Jun 30, 2026
One-click install
npx skills add https://github.com/BAIZ1D/macbookM1_rice --skill aws-security-audit-baiz1d
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-security-audit
Source: https://github.com/BAIZ1D/macbookM1_rice/tree/main/agent/skills/security/aws-security-audit
Command: npx skills add https://github.com/BAIZ1D/macbookM1_rice --skill aws-security-audit-baiz1d

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually auditing AWS environments for security vulnerabilities, misconfigurations, and compliance gaps is time-consuming and prone to human error, especially across large, multi-service cloud deployments.

Core Features & Use Cases

  • Multi-Domain Security Checks: Audits IAM, network security, data protection, and logging & monitoring configurations aligned with CIS AWS Foundations, PCI-DSS, and HIPAA standards.
  • Automated Reporting & Scoring: Generates comprehensive audit reports and calculates a prioritized security score to streamline remediation efforts.
  • Use Case: A cloud administrator can use this skill to quickly identify unencrypted EBS volumes, open security groups, and IAM users without MFA across their AWS account without manually running dozens of individual CLI commands.

Quick Start

Use the aws-security-audit skill to run a full security posture assessment of your AWS account and receive a prioritized list of required remediation actions.

Frequently Asked Questions about aws-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an AWS security audit for CIS compliance?

An AWS security audit checks IAM, network, data protection, and logging configurations against CIS AWS Foundations, PCI-DSS, and HIPAA standards. It executes AWS CLI commands to identify misconfigurations and generates prioritized remediation guidance with quantitative security scores.

What is the best way to find unencrypted EBS volumes in my AWS account?

Auditing AWS data protection settings identifies unencrypted EBS volumes automatically. Instead of manually running CLI commands, a security posture assessment scans your environment and flags encryption gaps alongside other vulnerabilities.

How does automated AWS security scoring work for remediation?

AWS security scoring calculates a quantitative score by evaluating access controls, network rules, encryption settings, and monitoring configurations. This prioritized scoring streamlines remediation efforts by highlighting the most critical misconfigurations first.

Can I check IAM users without MFA using AWS CLI auditing?

Yes, AWS security auditing checks IAM access controls to identify users without MFA. It audits IAM configurations across your account to ensure adherence to security standards without requiring manual inspection of individual user settings.

Does this AWS security audit work for PCI-DSS and HIPAA compliance?

Yes, the security audit assesses cloud infrastructure against PCI-DSS and HIPAA standards. It evaluates IAM, network, data protection, and logging layers to identify compliance gaps and generate remediation guidance.

How do I find open security groups in AWS without manual CLI commands?

A security posture assessment audits network security rules to detect open security groups automatically. It scans your AWS environment to identify network misconfigurations and includes them in a comprehensive report with remediation guidance.