Manage AWS KMS keys, aliases, policies, and encryption via the AWS CLI.
npx skills add https://github.com/david-2814/claw-aws --skill kms
Please help me install this Agent Skill. Skill: kms Source: https://github.com/david-2814/claw-aws/tree/main/skills/kms Command: npx skills add https://github.com/david-2814/claw-aws --skill kms
Managing AWS KMS keys, aliases, grants, and policies across environments can be error-prone and hard to audit.
Initialize a new customer-managed key and perform a basic encrypt/decrypt test using the AWS CLI.
High-intent search queries and answers about installing and using this skill.
You can manage AWS KMS keys and aliases across multiple accounts by using AWS CLI commands to create keys, assign aliases, and configure cross-account access. This streamlines multi-account security workflows and ensures consistent key administration.
The best way to enforce KMS policy compliance is by attaching strict policies and enabling key rotation via AWS CLI commands. This ensures your customer-managed keys are automatically rotated and audited for secure usage.
To encrypt and decrypt data using AWS KMS, use the AWS CLI encrypt and decrypt commands. This allows you to securely handle cryptographic operations directly from the command line using your managed keys.
Yes, you can configure cross-account access control by managing KMS grants and key policies. This allows secure delegation of encryption and decryption permissions to external AWS accounts.
Safety guidance for destructive AWS KMS actions is built into the workflow to prevent accidental data loss during key deletion or policy modifications. This ensures secure execution of potentially irreversible CLI commands.
You can generate a data key using the AWS CLI generate-data-key command. This provides the necessary cryptographic material to perform local envelope encryption while keeping the master key secure in AWS KMS.
atlanhqInstall the Atlan CLI only when missing and configure tenant authentication.
snoodleboot-ioAutomate compliance checks across systems using policy as code standards.
dgethingsInspect IAM users, roles, policies, and CloudTrail events across AWS accounts.
ancolemanAutomate cloud infrastructure provisioning with Terraform, Pulumi, and AWS CDK.
