skills.rest
Skobyn
SkobynCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

cloud-iam-deep

Enumerate IAM roles, policies, and users across AWS, Azure, and GCP.

Updated Jun 24, 2026
Search Tags:#privilege escalation#cloud security#red team#cloud audit#IAM enumeration
One-click install
npx skills add https://github.com/Skobyn/talon --skill cloud-iam-deep-skobyn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-iam-deep
Source: https://github.com/Skobyn/talon/tree/main/skills/cloud-iam-deep
Command: npx skills add https://github.com/Skobyn/talon --skill cloud-iam-deep-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, azcli, gcloud, prowler, pacu, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for red-team operators to assess and exploit cloud IAM configurations, identifying potential vulnerabilities and misconfigurations in AWS, Azure, and GCP environments.

Core Features & Use Cases

  • Cloud IAM Enumeration: Enumerate and analyze IAM roles, policies, and users across AWS, Azure, and GCP.
  • Privilege Escalation: Identify and exploit privilege escalation paths within cloud environments.
  • Credential Validation: Validate and assess the impact of leaked cloud credentials.
  • Use Case: For a red-team engagement targeting a cloud environment, this Skill can be used to identify misconfigured IAM roles that allow for unauthorized access to sensitive resources.

Quick Start

Run the cloud-iam-deep skill to enumerate IAM roles and policies in the AWS account 'my-aws-account'.

Frequently Asked Questions about cloud-iam-deep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate cloud IAM roles and policies across AWS, Azure, and GCP?▼

Cloud IAM enumeration identifies and analyzes IAM roles, policies, and users across AWS, Azure, and GCP. It requires installed AWS CLI, Azure CLI, and gcloud tools to perform cloud-specific operations and generate detailed reports on permissions.

What is the best way to find privilege escalation paths in cloud environments?▼

Finding privilege escalation paths involves identifying and exploiting IAM misconfigurations in AWS, Azure, and GCP. This approach targets potential vulnerabilities that could lead to unauthorized access during red-team operations and security audits.

Do I need to install Pacu and Prowler to assess cloud IAM misconfigurations?▼

Yes, assessing cloud IAM misconfigurations requires tools like Pacu and Prowler alongside AWS CLI, Azure CLI, and gcloud. These dependencies provide the specialized framework needed for red-team operations and security audits.

Can I validate leaked AWS credentials and assess their impact?▼

Yes, you can validate leaked cloud credentials to assess their impact. It evaluates compromised keys and determines the extent of unauthorized access they provide within the AWS, Azure, or GCP environment.

How does a cloud audit identify misconfigured IAM roles that allow unauthorized access?▼

A cloud audit identifies misconfigured IAM roles by enumerating permissions and analyzing potential vulnerabilities across AWS, Azure, and GCP. It provides detailed reports highlighting misconfigurations that could lead to unauthorized access.

What are the limitations of using automated tools for cloud IAM enumeration?▼

Automated cloud IAM enumeration depends heavily on pre-configured CLI credentials and tools like Pacu and Prowler. Limitations include potential detection by monitoring systems and the need for precise configuration of cloud-specific operations.

Related Skills

zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced
junkisaijunkisai

security-audit

Coordinate Red Team and Blue Team assessments to generate SECURITY_REPORT.md.

Community
Advanced
lips85lips85

AWS Penetration Testing

Performs AWS penetration tests including privilege escalation and IAM enumeration using Pacu and Boto3.

Community
Advanced
hardw00thardw00t
90

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

Community
Advanced