skills.rest
UnitOneAI
UnitOneAIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

iam-review

Review cloud IAM configurations for insecure authentication and authorization practices.

44|128|Updated Mar 6, 2026
Search Tags:#access control#iam#mfa#zero trust#least privilege#service accounts#identity lifecycle
One-click install
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill iam-review-unitoneai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: iam-review
Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/skills/identity/iam-review
Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill iam-review-unitoneai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

IAM configurations can drift into insecure states—overbroad permissions, missing MFA, stale identities, and weak zero-trust enforcement—creating real paths for privilege escalation and account takeover.

Core Features & Use Cases

  • Identity & access assessment grounded in standards: Reviews IAM against NIST SP 800-63B, NIST SP 800-207, and CIS Controls v8 with explicit finding categories.
  • Least-privilege and privilege lifecycle checks: Detects wildcard/standing admin permissions, missing time-bounded (JIT) elevation, and inadequate access granting/revoking processes.
  • Service account and stale account hygiene: Flags weak service account credential practices, orphaned identities, and missing deprovisioning and access review cadences.

Use case example: Assess a cloud environment’s IAM policies and role assignments to identify MFA gaps, over-privileged roles, and former-employee access that persists beyond offboarding.

Quick Start

Run the skill by pointing it at your IAM exports or policy files (for example, your target directory) and ask it to perform an IAM security assessment.

Frequently Asked Questions about iam-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit IAM configurations for least privilege and zero trust readiness?▼

You can audit IAM policies for least privilege by analyzing cloud role assignments and permissions exports to detect wildcard or standing admin permissions, missing MFA, and inadequate access revoking processes.

What is the best way to check for stale service accounts and orphaned identities?▼

The best way to check for stale service accounts and orphaned identities is to audit identity lifecycle workflows, identifying missing deprovisioning cadences and weak credential practices across your environment.

Can I use this to assess IAM security across AWS, Azure, and GCP hybrid environments?▼

Yes, you can assess IAM security across AWS, Azure, and GCP hybrid environments by reviewing your cloud IAM policy and role assignments to detect MFA gaps and weak zero-trust enforcement.

How do I map IAM security findings to NIST and CISControls standards?▼

Map IAM security findings to NIST and CIS Controls by evaluating authentication and authorization configurations, producing a structured findings table with prioritized remediation mapped to NIST SP 800-63B and CIS Controls v8.

Does the IAM review process detect missing just-in-time elevation for standing admin permissions?▼

Yes, the IAM review process detects missing time-bounded just-in-time elevation by checking for standing admin permissions and wildcard access, ensuring time-bounded privilege granting aligns with least-privilege requirements.

Related Skills

Explore More Legal & Compliance Skills→
philo-grovesphilo-groves
12

maxtac-cloud-iam-boundary

Verify cloud identity security boundaries across AWS, Azure, and GCP.

Community
Advanced
belokonmbelokonm
8

ad-security-reviewer

Assess Active Directory security posture across domains with risk scores and remediation plans.

Community
Advanced
cornmanwtfcornmanwtf

zero-trust-architecture

Design and implement Zero Trust Architecture with identity verification, least privilege, and network segmentation.

Community
Advanced
AgentientAgentient
2

gcp-hardening

Enforce IAM least privilege, VPC security, and Secret Manager usage on Google Cloud Platform.

Official
Basic