god-iam-aws

Creating IAM roles for EKS clusters using IRSA requires defining precise trust policies and permissions. This Skill automates IAM role management and validates the exact permissions using the AWS policy simulator to ensure secure, least privilege access patterns.

Automating IAM policy creation and validation requires referencing AWS documentation and simulating access to prevent zero hallucination. This Skill utilizes Python scripts and the policy simulator to generate, manage, and verify IAM policies for compliance and accuracy.

Yes, you can manage cross-account IAM access and Service Control Policies using AWS Organizations. This Skill defines and manages IAM roles for cross-account access and utilizes SCPs to enforce comprehensive IAM control across your organizational hierarchy.

Auditing AWS IAM credentials and analyzing access patterns requires implementing robust credential hygiene and regular permission analysis. This Skill automates IAM auditing to identify excessive permissions and ensures your environment maintains least privilege access.

Yes, you need Python and the boto3 library installed to use this Skill for IAM management. The Skill requires Python scripts to execute IAM policy simulation and verification against your AWS environment for accurate validation and testing.

Setting up an IAM role for a Lambda function with MFA requires defining specific permissions and an assume role policy with MFA conditions. This Skill automates the creation and management of these IAM roles to ensure secure, compliant function execution and access.