skills.rest
aws-samples
aws-samplesOFFICIAL
Explore all skills by this author →
WebsiteGitHub

evidence

Validate AWS resource compliance with live CLI probes in CI/CD pipelines.

43|13|Updated Feb 6, 2026
Search Tags:#CI/CD#compliance#CLI#AWS#runtime verification
One-click install
npx skills add https://github.com/aws-samples/sample-agentic-value-accelerator --skill evidence-aws-samples
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: evidence
Source: https://github.com/aws-samples/sample-agentic-value-accelerator/tree/main/platform/control_plane/service_approval/plugin/.claude-plugin/skills/evidence
Command: npx skills add https://github.com/aws-samples/sample-agentic-value-accelerator --skill evidence-aws-samples

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill validates the compliance of deployed AWS resources by executing live CLI probes to ensure that each mapped control is enforced.

Core Features & Use Cases

  • Runtime Verification: Proves that each mapped control is enforced at runtime.
  • Control Matrix: Generates a matrix showing the enforcement status of each control.
  • Use Case: Use the evidence skill in a CI/CD pipeline to ensure that compliance requirements are met before deployment.

Quick Start

Run the evidence skill with the service slug 'awslambda' and the AWS profile 'dev'.

Frequently Asked Questions about evidence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify AWS resource compliance at runtime using CLI probes?▼

You can verify AWS resource compliance at runtime by executing live CLI probes that validate each mapped control is enforced. This approach proves compliance by checking the actual deployed state rather than just configuration files.

Can I automate compliance checks in a CI/CD pipeline for AWS resources?▼

Yes, you can automate compliance checks in a CI/CD pipeline by running live CLI probes against your AWS resources. This ensures compliance requirements are met before deployment proceeds.

What is runtime verification for AWS compliance controls?▼

Runtime verification for AWS compliance controls is the process of proving that each mapped control is actively enforced on deployed resources. It generates a matrix showing the enforcement status of each control.

Do I need Python and AWS credentials to run live CLI probes for compliance?▼

Yes, you need Python3 installed and configured AWS credentials to run live CLI probes for compliance. These prerequisites are required for the CLI calls that validate your deployed AWS resources.

How do I generate a compliance control matrix showing enforcement status?▼

You can generate a compliance control matrix by running live CLI probes against your AWS resources. The matrix maps each control to its enforcement status, proving runtime compliance.

What is the best way to enforce compliance controls before AWS deployment?▼

The best way to enforce compliance controls before AWS deployment is to integrate runtime verification into your CI/CD pipeline. Live CLI probes validate that each mapped control is actively enforced on deployed resources.

Related Skills

Explore More Software Engineering Skills→
ryancnelsonryancnelson
34

Delegating to AWS Agent

Delegate AWS queries to a sub-agent for EC2, S3, IAM, ECS, and Lambda.

Community
Advanced
summarybotngsummarybotng
2

qcsd-cicd-swarm

Analyze CI/CD pipeline artifacts and issue RELEASE, REMEDIATE, or BLOCK decisions.

Official
Advanced
ToanPV90ToanPV90

cloudformation-generator

Generate AWS CloudFormation YAML templates with parameters, resources, and outputs.

Community
Intermediate
jens-wedinjens-wedin

a11y-qa

Audit web applications for accessibility violations via axe-core and eslint-plugin-jsx-a11y.

Community
Intermediate