skills.rest
ai-enhanced-engineer
ai-enhanced-engineerOFFICIAL
Explore all skills by this author →
WebsiteGitHub

aws-security-hardening

Implement AWS security best practices for IAM, OIDC, and Secrets Manager.

3|Updated Jan 25, 2026
Search Tags:#security#AWS#container security#IAM#OIDC#Secrets Manager
One-click install
npx skills add https://github.com/ai-enhanced-engineer/aiee-skills --skill aws-security-hardening-ai-enhanced-engineer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-security-hardening
Source: https://github.com/ai-enhanced-engineer/aiee-skills/tree/main/skills/aws-security-hardening
Command: npx skills add https://github.com/ai-enhanced-engineer/aiee-skills --skill aws-security-hardening-ai-enhanced-engineer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aws, github, secretsmanager, container, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides expert security patterns for AWS, addressing IAM least privilege, GitHub OIDC, Secrets Manager, and container security to protect resources and eliminate long-lived credentials.

Core Features & Use Cases

  • IAM Least Privilege: Implement policies and conditions for strict access control.
  • GitHub OIDC Federation: Use GitHub OIDC for secure CI/CD workflows.
  • Secrets Manager: Safely manage credentials and secrets.
  • Container Security: Implement practices for secure container deployment.
  • Use Case: Secure an AWS environment by applying IAM policies, integrating GitHub OIDC, and implementing Secrets Manager for sensitive data.

Quick Start

Apply IAM least privilege policies to your AWS resources.

Frequently Asked Questions about aws-security-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I eliminate long-lived credentials in AWS GitHub Actions deployments?▼

You eliminate long-lived credentials by implementing GitHub OIDC federation, which establishes trust between your GitHub Actions workflows and AWS IAM roles to enable secure keyless deployments.

What is the best way to implement IAM least privilege for AWS resources?▼

Implementing IAM least privilege involves applying strict IAM policies and conditions to enforce minimal access control, ensuring your AWS resources are protected from unauthorized access.

How does Secrets Manager integration work for securing container deployments?▼

Secrets Manager secures container deployments by safely storing and managing credentials, allowing containerized applications to retrieve sensitive data dynamically without hardcoding secrets.

Do I need existing IAM roles configured to use GitHub OIDC with AWS?▼

Yes, using GitHub OIDC with AWS requires existing IAM infrastructure. You must configure an IAM identity provider and roles to establish the trust relationship necessary for secure CI/CD workflows.

Can I apply these AWS security hardening patterns to existing container environments?▼

Yes, these AWS security hardening patterns apply to existing container environments. The Skill implements container security practices that integrate with your current AWS infrastructure for secure deployment workflows.

Related Skills

Explore More Software Engineering Skills→
huggingfacehuggingface
10.9k

hf-cloud-sagemaker-iam-preflight

Verify or create AWS SageMaker IAM execution roles with AWS CLI.

Official
Advanced
ai-enhanced-engineerai-enhanced-engineer
3

aws-cicd-patterns

Automate AWS CI/CD pipelines with GitHub Actions, ECR, and OIDC.

Official
Advanced
mashharukimashharuki
2

creating-secrets-using-best-practices

Manage AWS Secrets Manager secrets with KMS encryption, rotation, and IAM policies.

Community
Advanced
balsm-healthbalsm-health
2

implementing-hashicorp-vault-dynamic-secrets

Automate generation, management, and rotation of dynamic secrets with HashiCorp Vault.

Official
Advanced