skills.rest
tjl8787
tjl8787COMMUNITY
Explore all skills by this author →
GitHub

iam

Automates AWS IAM role and policy management with TypeScript and Python SDKs.

Updated Feb 28, 2026
Search Tags:#security#aws#access control#iam#roles#policies
One-click install
npx skills add https://github.com/tjl8787/mycodex-skills --skill iam-tjl8787
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: iam
Source: https://github.com/tjl8787/mycodex-skills/tree/main/skills/iam
Command: npx skills add https://github.com/tjl8787/mycodex-skills --skill iam-tjl8787

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive guidance and tools for managing AWS Identity and Access Management (IAM), ensuring secure and efficient access control to your AWS resources.

Core Features & Use Cases

  • Policy Management: Create, manage, and audit IAM policies for least privilege access.
  • Role Management: Set up and assume roles for secure cross-account access and service integrations.
  • Security Best Practices: Implement robust security measures like MFA, credential rotation, and access analysis.
  • Use Case: You need to grant a new developer read-only access to S3 buckets in a specific region. This Skill can help you create a custom IAM policy and attach it to their IAM user or role, ensuring they only have the necessary permissions.

Quick Start

Use the iam skill to create a new IAM role with a trust policy that allows Lambda to assume it.

Frequently Asked Questions about iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an IAM role that allows a Lambda function to access AWS resources?▼

To create an IAM role for Lambda, you must define a trust policy allowing the Lambda service to assume it, then attach permission policies granting access to specific AWS resources. This ensures secure service integration.

What is the best way to grant a developer read-only access to S3 buckets?▼

The best way to grant read-only S3 access is by creating a custom IAM policy with explicit s3:GetObject permissions and attaching it to the developer's IAM user or role, enforcing least privilege access.

How do I set up cross-account access using IAM roles?▼

Cross-account access is set up by creating an IAM role in the target account with a trust policy specifying the source account, then allowing users in the source account to assume that role using CLI or boto3.

Can I manage IAM policies using boto3 and the AWS CLI?▼

Yes, you can manage IAM policies using boto3 and the AWS CLI for automated policy creation, updates, and audits. This allows programmatic control over secure access management for AWS services and resources.

When do I need to use trust relationships in AWS IAM?▼

You need trust relationships in AWS IAM when establishing service roles or cross-account access. They define which principals, like AWS services or external accounts, are permitted to assume a specific IAM role.

Related Skills

Explore More Software Engineering Skills→
balsm-healthbalsm-health
2

implementing-aws-iam-permission-boundaries

Configure AWS IAM permission boundaries to enforce least privilege on roles and policies using CLI/boto3 workflows.

Official
Advanced
jassicsjassics
6

cloud-iam-review

Audit AWS, Azure, and GCP IAM configurations for least privilege risks.

Community
Advanced
YukiIto1999YukiIto1999

securing-aws-lambda-execution-roles

Audit AWS Lambda execution roles and generate least-privilege IAM policies.

Community
Advanced
markus41markus41
1

aws

Provision and manage AWS infrastructure via CLI, Boto3, and Terraform.

Community
Advanced