Cloud Security Verification

Verify AWS security configurations using AWS CLI commands and network probes.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/jayjpatel9717/kurukshetra --skill cloud-security-verification
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Cloud Security Verification
Source: https://github.com/jayjpatel9717/kurukshetra/tree/main/_universal/agents/dharmaraj/skills/cloud-security-verification
Command: npx skills add https://github.com/jayjpatel9717/kurukshetra --skill cloud-security-verification

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires awscli, curl, nmap, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides independent verification of cloud security assessment findings, addressing potential misconfigurations, public exposure, encryption gaps, and more.

Core Features & Use Cases

  • Independent Verification: Verifies IAM misconfigurations, public exposure, network security, encryption, and more.
  • AWS CLI Commands: Uses AWS CLI commands to verify findings like IAM policies, S3 bucket accessibility, and network security groups.
  • Direct HTTP Probes: Directly probes public endpoints to check for accessibility.
  • Policy Simulation: Simulates policy effects to validate permission claims.
  • Network Probes: Uses tools like nmap to verify open ports on security groups.
  • Compliance Mapping: Maps findings to CIS, SOC2, PCI-DSS compliance frameworks.

Quick Start

Use the cloud-security-verification skill to verify cloud security misconfigurations for a specific AWS account.

Frequently Asked Questions about Cloud Security Verification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify cloud security configurations in AWS?

Independent cloud security verification validates IAM, network, and encryption configurations against AWS best practices by combining AWS CLI policy checks with direct network probing using curl and nmap.

How does direct network probing work for cloud security auditing?

Direct network probing for cloud security auditing uses tools like nmap to scan open ports on security groups and curl to probe public HTTP endpoints, independently validating exposure risks.

Can I use AWS CLI to check S3 bucket public exposure and encryption gaps?

Yes, AWS CLI can verify S3 bucket accessibility and encryption gaps by running policy simulations to validate permission claims, ensuring your storage configurations comply with AWS best practices.

Do I need nmap and curl installed to audit cloud infrastructure?

Yes, you need nmap and curl installed alongside AWS CLI access to perform direct network probes and HTTP endpoint checks required for independent cloud infrastructure auditing and verification.

What is the best way to map cloud security findings to compliance frameworks?

The best way to map cloud security findings to compliance frameworks is to verify IAM, network, and encryption configurations against CIS, SOC2, and PCI-DSS standards using automated AWS CLI commands and network probes.

Can I simulate IAM policies to validate AWS permission claims?

Yes, you can simulate IAM policies to validate AWS permission claims, verifying which resources a user or role can access to prevent misconfigurations and ensure least-privilege compliance with AWS best practices.

Related Skills