cloud-security

Multi-cloud security audits are automated by running bundled Python enumeration scripts against AWS, Azure, and GCP accounts to identify misconfigurations and IAM weaknesses. This provides centralized posture findings and remediation guidance across all three environments.

IAM policy analysis and storage-permission auditing are supported core features. The skill assesses IAM policies across cloud environments to identify weaknesses, misconfigurations, and privilege-escalation paths using bundled scripts and external IAM tooling.

External tooling installations are required to run multi-cloud security assessments. You must install ScoutSuite, Prowler, CloudSploit, Steampipe, Pacu, and related IAM tooling to perform enumeration and privilege checks across AWS, Azure, and GCP.

Testing for cloud misconfigurations and privilege escalation is best handled by running the skill's Python enumeration scripts for each provider. This automates cross-cloud coverage, identifying storage permission flaws and IAM privilege-escalation paths.

Multi-cloud posture assessment works by executing provider-specific enumeration scripts to review configurations across AWS, Azure, and GCP. The scripts generate reports detailing misconfigurations, IAM weaknesses, and centralized remediation guidance.

A key limitation is the strict dependency on installing and configuring external tools like ScoutSuite, Prowler, and Pacu. Your assessments are bounded by the access scopes and capabilities of these underlying command-line utilities.