racf-iam-translator

Translate RACF security definitions into AWS IAM, GCP IAM, and Azure AD policies with Terraform bindings.

1|1|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/duboc/mainframe-skills-mig --skill racf-iam-translator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: racf-iam-translator
Source: https://github.com/duboc/mainframe-skills-mig/tree/main/skills/08-racf-iam-translator
Command: npx skills add https://github.com/duboc/mainframe-skills-mig --skill racf-iam-translator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

RACF-to-cloud IAM translation ensures migrated mainframe access controls have corresponding cloud policies, preventing security gaps during cutover.

Core Features & Use Cases

  • RACF export & mapping: Export RACF profiles and map them to cloud resources for AWS IAM, GCP IAM, and Azure AD.
  • Translation workflow: Parse RACF exports, translate policies, and generate cloud IAM bindings and Terraform configurations.
  • Security gap analysis: Identify RACF rules without cloud equivalents and flag high-severity gaps before go-live.

Quick Start

Run the Phase 08 RACF → IAM translation workflow to generate cloud IAM bindings for migrated datasets and users.

Frequently Asked Questions about racf-iam-translator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I translate RACF security definitions to cloud IAM policies?

To translate RACF security definitions, you parse exported RACF profiles and map dataset and user/group access directly to AWS IAM, GCP IAM, or Azure AD policies for cross-cloud deployment.

What is RACF to cloud IAM translation used for during mainframe migration?

RACF to cloud IAM translation is used during Phase 08 migrations to ensure migrated mainframe access controls have corresponding cloud policies, preventing security gaps during cutover.

Does this RACF translation workflow support generating Terraform configurations for AWS IAM?

Yes, the RACF translation workflow supports generating cloud IAM bindings and Terraform configurations for AWS IAM, GCP IAM, and Azure AD during cross-cloud deployment.

How do I identify missing access controls when migrating RACF rules to the cloud?

You identify missing access controls by performing a security gap analysis that flags RACF rules without cloud equivalents and highlights high-severity gaps before go-live.

Can I map RACF user and group access directly to Azure AD roles?

Yes, you can map RACF user and group access directly to Azure AD, as the translation workflow supports exporting RACF profiles and mapping them to Azure AD alongside AWS IAM and GCP IAM.