skills.rest
4lerman
4lermanCOMMUNITY
Explore all skills by this author →
GitHub

cloud-security

Check cloud configurations for security misconfigurations across AWS, Azure, and GCP.

Updated Apr 2, 2026
Search Tags:#IaC#IAM#cloud security#S3#security group#CSPM
One-click install
npx skills add https://github.com/4lerman/text_evaluator --skill cloud-security-4lerman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-security
Source: https://github.com/4lerman/text_evaluator/tree/main/.agents/skills/engineering-skills/cloud-security
Command: npx skills add https://github.com/4lerman/text_evaluator --skill cloud-security-4lerman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, azurecli, gcloud, python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive method for assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps.

Core Features & Use Cases

  • Cloud Posture Check: Identifies misconfigurations in cloud infrastructure.
  • IAM Policy Analysis: Detects privilege escalation paths and overprivileged grants.
  • S3 Exposure Assessment: Identifies public exposure of S3 buckets.
  • Security Group Analysis: Flags inbound rules that expose admin ports or database ports.
  • IaC Security Review: Reviews infrastructure-as-code for configuration issues.
  • Use Case: For a new AWS cloud deployment, run the Cloud Posture Check to identify and fix security misconfigurations before deployment.

Quick Start

Run the cloud security posture check on your AWS infrastructure using the cloud_posture_check.py script and provide the necessary JSON configuration files.

Frequently Asked Questions about cloud-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my cloud infrastructure for security misconfigurations?▼

Cloud security posture management checks cloud configurations for misconfigurations by systematically identifying IAM privilege escalation paths, S3 public exposure, and open security group rules using provided Python scripts.

Does this cloud security posture check support AWS, Azure, and GCP?▼

Yes, cloud security posture assessment covers AWS, Azure, and GCP posture checks. It requires the respective cloud provider CLI APIs and Python scripting to evaluate configurations and map findings to MITRE ATT&CK.

What is the best way to detect IAM privilege escalation paths in AWS?▼

The best way to detect IAM privilege escalation paths is through IAM policy analysis, which systematically reviews configurations to identify overprivileged grants and exploitable attack surface across your cloud infrastructure.

How do I assess S3 public exposure before deploying new cloud infrastructure?▼

You can assess S3 public exposure by running the cloud posture check script with the necessary JSON configuration files, which identifies publicly exposed S3 buckets and flags misconfigurations before deployment.

Can I review infrastructure-as-code for security gaps using this methodology?▼

Yes, IaC security review evaluates infrastructure-as-code files to detect configuration issues and security gaps, ensuring your cloud deployment templates do not introduce exploitable attack surface.

Do I need Python and cloud provider APIs to map cloud security findings to MITRE ATT&CK?▼

Yes, mapping cloud security findings to MITRE ATT&CK requires Python scripting along with the awscli, azurecli, or gcloud APIs to systematically assess cloud configurations and identify exploitable attack surface.

Related Skills

Explore More Software Engineering Skills→
DCx7C5DCx7C5

cloud-SKILL.md

Aggregate cloud misconfigurations from AWS Security Hub, Azure Defender, and open-source tools.

Community
Advanced
devCharuzudevCharuzu

cloud-security

Analyze AWS, Azure, and GCP cloud configurations for misconfigurations and exposure risks.

Community
Intermediate
Logos-LiberLogos-Liber
17

infrastructure-as-code

Automate cloud infrastructure provisioning with Terraform, CloudFormation, ARM templates, and Kubernetes manifests.

Official
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced