skills.rest
jaskaranhundal
jaskaranhundalCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

cloud-security-posture

Scan AWS, Azure, and GCP configurations against CIS benchmarks and map findings to compliance frameworks.

3|3|Updated Mar 8, 2026
Search Tags:#aws#gcp#azure#compliance#cloud security#misconfiguration#cspm
One-click install
npx skills add https://github.com/jaskaranhundal/usap-skills --skill cloud-security-posture
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloud-security-posture
Source: https://github.com/jaskaranhundal/usap-skills/tree/main/cloud-infra/cloud-security-posture
Command: npx skills add https://github.com/jaskaranhundal/usap-skills --skill cloud-security-posture

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and reports on cloud infrastructure misconfigurations and security posture drift across AWS, Azure, and GCP, helping you maintain compliance and reduce your attack surface.

Core Features & Use Cases

  • Posture Scanning: Continuously evaluates cloud resource configurations against security benchmarks like CIS.
  • Misconfiguration Detection: Identifies deviations from secure baselines and best practices.
  • Drift Analysis: Detects unauthorized changes to your cloud environment's configuration.
  • Compliance Mapping: Maps findings to various compliance frameworks (CIS, NIST, SOC 2, PCI DSS, HIPAA).
  • Use Case: Automatically scan your AWS environment daily to find publicly exposed S3 buckets or overly permissive security groups, and receive actionable remediation steps.

Quick Start

Run a posture scan for all your AWS accounts and report any critical misconfigurations found.

Frequently Asked Questions about cloud-security-posture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect cloud misconfigurations across AWS, Azure, and GCP?▼

Cloud misconfiguration detection is performed by scanning your AWS, Azure, and GCP environments against security benchmarks like CIS to identify deviations from secure baselines and report posture drift.

How does cloud security posture scanning map findings to compliance frameworks?▼

Cloud security posture scanning maps detected misconfigurations to compliance frameworks including CIS, NIST, SOC 2, PCI DSS, and HIPAA, providing actionable remediation commands for each identified drift or deviation.

Can I scan cloud infrastructure for security drift with read-only permissions?▼

Yes, you can scan cloud infrastructure for security drift using read-only intent for analysis. Optional mutating intent for remediation requires explicit approval before executing any fixing commands.

What is the best way to find publicly exposed S3 buckets and permissive security groups?▼

The best way to find publicly exposed S3 buckets or overly permissive security groups is continuous posture scanning, which evaluates resource configurations against CIS benchmarks to detect deviations.

Does cloud security posture scanning support automated daily checks for compliance?▼

Yes, it supports automated daily checks for compliance by continuously evaluating cloud resource configurations against security benchmarks to maintain compliance and reduce your attack surface.

What are the limitations of using read-only intent for cloud security posture remediation?▼

With read-only intent, scanning is limited to analysis and detecting misconfigurations. Applying remediation commands requires switching to a mutating intent, which necessitates explicit approval.

Related Skills

Explore More Software Engineering Skills→
adbertramadbertram

prowler-compliance

Create and validate Prowler compliance frameworks for AWS, Azure, and GCP.

Community
Basic
josemlopezjosemlopez
8

tm-compliance

Map threats and controls to compliance frameworks and generate audit-ready reports.

Community
Advanced
snoodleboot-iosnoodleboot-io
2

infrastructure-drift-detection

Compare current infrastructure configurations against baseline configurations to detect drift.

Official
Advanced
devkenidevkeni
1

cloud-security

Automate multi-cloud security assessments across AWS, Azure, and GCP.

Community
Advanced