iam

Audit and secure AWS IAM users, roles, policies, and access keys.

3|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/david-2814/claw-aws --skill iam-david-2814
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: iam
Source: https://github.com/david-2814/claw-aws/tree/main/skills/iam
Command: npx skills add https://github.com/david-2814/claw-aws --skill iam-david-2814

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Centralizes auditing and secure management of AWS IAM resources, helping teams detect risky configurations and enforce least privilege across accounts.

Core Features & Use Cases

  • Audit and inspect IAM users, roles, and policies with AWS CLI.
  • Generate credential reports and security audits to identify MFA gaps and unused keys.
  • Safely create, modify, and detach policies with guardrails to prevent accidental lockouts.

Quick Start

Install AWS CLI v2, configure credentials, and run the IAM audit workflow to inspect users, roles, and policies.

Frequently Asked Questions about iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit AWS IAM users, roles, and policies for security risks?

You can audit AWS IAM configurations by running read-only checks with the AWS CLI to inspect users, roles, and policies. This process identifies risky configurations and helps enforce least privilege across your accounts.

What is the best way to generate an AWS credential report to find unused access keys?

Generating an AWS credential report provides a detailed security audit to identify MFA gaps and unused access keys. The report inspects credential configurations across accounts to highlight dormant security vulnerabilities.

Can I safely modify and detach IAM policies without causing accidental lockouts?

Yes, you can safely create, modify, and detach IAM policies using built-in guardrails. These controlled modifications prevent accidental lockouts while orchestrating policy changes across typical enterprise environments.

Do I need AWS CLI v2 configured to inspect IAM configurations?

Yes, you need to install AWS CLI v2 and configure your credentials before starting. This setup enables the IAM audit workflow to execute read-only inspections and generate credential reports.

What are the limitations when orchestrating IAM policy changes across enterprise accounts?

The skill focuses on typical enterprise environments and uses guardrails for safe change orchestration. While it supports read-only checks and controlled modifications, complex policy dependency conflicts may require manual review.