cloud-iam-deep

Analyze cloud IAM privilege escalation paths across AWS, Azure, and GCP.

13|2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/pdparchitect/rook --skill cloud-iam-deep-pdparchitect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/pdparchitect/rook/tree/main/skills/cloud-iam-deep
Command: npx skills add https://github.com/pdparchitect/rook --skill cloud-iam-deep-pdparchitect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of analyzing cloud security postures by identifying and exploiting external-facing IAM vulnerabilities across AWS, Azure, and GCP environments.

Core Features & Use Cases

  • Privilege Escalation Analysis: Identifies over 38 distinct escalation paths across major cloud providers, including AWS role-trust-policy abuse and Azure Managed Identity exploitation.
  • Credential Validation: Automates the identification and validation of leaked cloud credentials (keys, tokens, JSON) to determine their effective permissions.
  • Use Case: When a developer accidentally commits an AWS access key to a public repository, use this skill to immediately determine the scope of access, identify potential privilege escalation paths, and assess the risk to production infrastructure.

Quick Start

Use the cloud-iam-deep skill to validate the provided AWS access key and enumerate all reachable IAM policies and roles.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify cloud IAM privilege escalation paths in AWS, Azure, and GCP?

You analyze cloud IAM privilege escalation by systematically enumerating IAM policies, trust relationships, and service-specific permissions across AWS, Azure, and GCP to identify over 38 distinct unauthorized access vectors.

What is the best way to validate leaked AWS access keys and determine their effective permissions?

The best way to validate leaked AWS access keys is to automate the identification and validation of cloud credentials to determine their effective permissions, identify potential privilege escalation paths, and assess production infrastructure risk.

Can I exploit SSRF-based metadata service vulnerabilities to access cloud service identities?

Yes, cloud IAM exploitation targets scenarios involving SSRF-based metadata service exploitation and misconfigured service identities to identify unauthorized access vectors across major cloud providers.

How do I enumerate AWS role-trust-policy abuse and Azure Managed Identity exploitation paths?

You enumerate these paths by analyzing over 38 distinct escalation paths across major cloud providers, specifically targeting AWS role-trust-policy abuse and Azure Managed Identity exploitation to identify external-facing IAM vulnerabilities.

Does cloud IAM privilege analysis work for analyzing leaked credentials like JSON tokens and access keys?

Yes, cloud IAM privilege analysis works by automating the identification and validation of leaked cloud credentials including keys, tokens, and JSON files to determine their effective permissions and map potential privilege escalation paths.