skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

cloud-iam-deep

Analyzes and validates IAM security configurations and credentials across AWS, Azure, and GCP.

5|Updated May 27, 2026
Search Tags:#aws#gcp#azure#iam#cloud security#red team
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill cloud-iam-deep-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/cloud-iam-deep
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill cloud-iam-deep-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aws, az, gcloud, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill unit provides a comprehensive analysis of cloud IAM security across AWS, Azure, and GCP, focusing on external exploitation paths and post-credential-discovery privilege analysis.

Core Features & Use Cases

  • IAM Enumeration: Covers IAM enumeration for AWS, Azure, and GCP.
  • STS/AssumeRole Chaining: Analyzes STS/AssumeRole chaining for privilege escalation.
  • Credential Identification: Identifies and validates cloud credentials.
  • Privilege Escalation Patterns: Offers IAM privilege escalation patterns for AWS, Azure, and GCP.
  • Use Case: Imagine you have accessed a cloud credential and need to determine its permissions and how to escalate privileges.

Quick Start

Use the cloud-iam-deep skill to validate AWS credentials and identify potential privilege escalation paths.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate IAM permissions and find privilege escalation paths in AWS, Azure, and GCP?▼

STS AssumeRole chaining is a privilege escalation technique that links roles to expand access. Analyzing STS AssumeRole chaining reveals how compromised AWS credentials can traverse permissions, exposing paths to escalate privileges within the target environment.

Can I validate discovered cloud credentials and determine their effective permissions?▼

You need AWS, Azure, or GCP command-line tools installed, specifically aws, az, and gcloud. Valid AWS credentials are also required for IAM enumeration, STS AssumeRole chaining, and privilege escalation pattern analysis.

What is the best way to analyze external exploitation paths after discovering cloud credentials?▼

This approach focuses on post-credential-discovery privilege analysis rather than initial access. It assumes you already have cloud credentials and need to determine their permissions and how to escalate privileges using IAM enumeration and role chaining.

Does this approach work for analyzing privilege escalation patterns across multiple cloud providers simultaneously?▼

Yes, it works for analyzing privilege escalation patterns across AWS, Azure, and GCP simultaneously. The analysis covers IAM enumeration, credential validation, and role chaining to identify external exploitation paths in multi-cloud environments.

Related Skills

sseshachalasseshachala

cloud-iam-deep

Map cloud IAM privilege exposure across AWS, Azure, and GCP.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
uphiagouphiago
1.1k

hunt-cloud-misconfig

Detect cloud misconfigurations across AWS, GCP, and Azure environments.

Community
Advanced
devCharuzudevCharuzu

cloud-security

Analyze AWS, Azure, and GCP cloud configurations for misconfigurations and exposure risks.

Community
Intermediate