cloud-security

Cloud security posture management analyzes IAM policies to detect privilege escalation paths and over-permissive grants. It requires read access to your configurations and outputs structured findings with MITRE ATT&CK mappings for proactive defense.

To check S3 bucket exposure, the Skill analyzes bucket configurations for public access settings and encryption safeguards. It identifies misconfigurations that create exploitable attack surfaces and outputs structured findings detailing the exposure risks.

Yes, the cloud security posture management tool applies across AWS, Azure, and GCP. It detects IAM privilege escalation, S3 exposure, and network security group misconfigurations in real-world deployments across all three providers.

Yes, you can review Infrastructure as Code security across Terraform, CloudFormation, and Kubernetes manifest checks. The analysis identifies open network rules and configuration risks before real-world deployment by leveraging IaC checks.

Security group analysis identifies open ports and internet-facing rules by reading your network security group configurations. It surfaces high-priority findings related to network misconfigurations that expose your cloud attack surface.

Cloud security posture management requires read access to IAM policies, bucket configurations, and security group rules. It focuses on configuration analysis and IaC checks, meaning it cannot detect runtime threats or exploit active vulnerabilities.