cloud-security

Identify cloud IAM misconfigurations and privilege-escalation paths across AWS, Azure, and GCP.

Updated Jun 2, 2026
One-click install
npx skills add https://github.com/ano4l/SiteRent --skill cloud-security-ano4l
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloud-security
Source: https://github.com/ano4l/SiteRent/tree/main/skills/cloud-security
Command: npx skills add https://github.com/ano4l/SiteRent --skill cloud-security-ano4l

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Cloud security posture management (CSPM) detects misconfigurations across IAM, storage, networking, and infrastructure-as-code, helping teams prevent exposure and privilege misuse.

Core Features & Use Cases

  • Cloud posture checks across AWS, Azure, and GCP for baseline security.
  • IAM policy analysis to identify privilege escalation risks and over-privileged access.
  • S3 exposure and insecure bucket configurations detection.
  • Security group and network exposure checks to minimize open ports.
  • IaC security review for Terraform, CloudFormation, and Kubernetes manifests.
  • MITRE ATT&CK mapping to align findings with attacker techniques and remediation guidance.

Quick Start

Run the cloud_posture_check.py tool on your policy.json to begin posture checks.

Frequently Asked Questions about cloud-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check cloud IAM policies for privilege escalation risks?

Cloud IAM policy analysis identifies privilege escalation paths and over-privileged access by evaluating policies against least privilege baselines. It maps findings to MITRE ATT&CK techniques and provides remediation guidance across AWS, Azure, and GCP environments.

How do I detect S3 bucket misconfigurations and exposure?

S3 exposure detection identifies insecure bucket configurations and public access vulnerabilities. It evaluates storage policies against secure defaults to prevent unintended data exposure during cloud posture assessments.

Can I scan Terraform and Kubernetes manifests for IaC security misconfigurations?

IaC security review scans Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations before deployment. It evaluates resource configurations against secure defaults to shift posture assessment left into the development pipeline.

What is CSPM and how does MITRE ATT&CK mapping work for cloud security findings?

CSPM detects misconfigurations across IAM, storage, networking, and infrastructure-as-code. MITRE ATT&CK mapping aligns detected findings with specific attacker techniques to prioritize remediation and prevent exposure and privilege misuse.

Does CSPM work across AWS, Azure, and GCP for production environments?

CSPM checks apply across AWS, Azure, and GCP for baseline security assessments. It supports posture evaluation in development, pre-production, and production environments to identify network exposure and insecure resource configurations.

How do I check security groups for open ports and network exposure?

Security group checks analyze network configurations to identify open ports and minimize external exposure. It evaluates firewall rules against secure defaults to reduce attack surface during cloud posture assessments.