skills.rest
transilienceai
transilienceaiOFFICIAL
Explore all skills by this author →
GitHub

review-access

Compile AWS IAM user permissions and activity for quarterly SOC 2 access reviews.

145|28|Updated Apr 4, 2026
Search Tags:#automation#aws#audit#compliance#iam#soc-2#access-review
One-click install
npx skills add https://github.com/transilienceai/shasta --skill review-access-transilienceai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-access
Source: https://github.com/transilienceai/shasta/tree/main/.claude/skills/review-access
Command: npx skills add https://github.com/transilienceai/shasta --skill review-access-transilienceai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

IAM access reviews are often manual, infrequent, and error-prone, making SOC 2 compliance difficult to verify and costly to audit.

Core Features & Use Cases

  • Automated quarterly IAM access reviews that enumerate users, permissions, and activity.
  • Flag suspicious or over-privileged accounts and generate remediation recommendations for auditors.
  • Use Case: For a mid-sized organization, run automated reviews to produce an auditable report showing user activity, MFA status, and policy attachments for quarterly SOC 2 attestation.

Quick Start

Run the access review with your configured AWS environment by invoking the Python command specified in shasta.config.json.

Frequently Asked Questions about review-access

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate quarterly IAM access reviews for SOC 2 compliance?▼

Automate quarterly IAM access reviews for SOC 2 compliance by running the configured Python command to enumerate AWS users, permissions, and activity. The workflow compiles user data, MFA status, and policy attachments into an auditable report.

What does an automated IAM access review flag for SOC 2 auditors?▼

An IAM access review flags suspicious or over-privileged AWS accounts and generates remediation recommendations. It surfaces user activity, MFA status, and policy attachments to simplify quarterly SOC 2 attestation.

Do I need AWS credentials and a Python environment to run access reviews?▼

Yes, you need a configured Python environment and AWS credentials to run access reviews. The workflow uses a local shasta.config.json file to determine the Python command and accesses AWS IAM configurations.

Can I use this access review automation for enterprise identity configurations beyond AWS IAM?▼

This access review automation applies to AWS IAM environments and enterprise identity configurations. It surfaces flagged users and recommended actions by compiling permissions and activity across these identity systems.

What's the best way to generate an auditable report showing user activity and MFA status?▼

Generate an auditable report of user activity and MFA status by running the automated access review workflow. It enumerates AWS IAM permissions and policy attachments, producing documentation for quarterly SOC 2 attestation.

Related Skills

Explore More Legal & Compliance Skills→
kkmookheykkmookhey
7

review-access

Automate quarterly AWS IAM access reviews and generate flagged-user reports.

Community
Intermediate
ethanolivertroyethanolivertroy
3

compliance-tracker

Track compliance status across multiple frameworks and identify gaps.

Community
Advanced
balsm-healthbalsm-health
2

implementing-aws-iam-permission-boundaries

Configure AWS IAM permission boundaries to enforce least privilege on roles and policies using CLI/boto3 workflows.

Official
Advanced
ovachieverovachiever
52

isms-audit-expert

Identify ISMS compliance gaps through automated audit processes aligned with ISO 27001.

Community
Advanced