security-review

Audit AWS IaC and configurations for security risks and misconfigurations.

15|20|Updated May 11, 2026
One-click install
npx skills add https://github.com/awslabs/startups --skill security-review-awslabs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/awslabs/startups/tree/main/solution-architecture/plugins/aws-dev-toolkit/skills/security-review
Command: npx skills add https://github.com/awslabs/startups --skill security-review-awslabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and remediate security weaknesses in AWS infrastructure code and configurations before they become production risks.

Core Features & Use Cases

  • Infrastructure Security Auditing: Reviews CDK, Terraform, CloudFormation, and SAM resources for security misconfigurations.
  • AWS Security Checks: Evaluates IAM permissions, networking controls, encryption settings, logging, and monitoring practices against security best practices.
  • Use Case: Review an AWS deployment before launch to find overly permissive IAM policies, exposed resources, missing encryption, and compliance gaps with actionable remediation guidance.

Quick Start

Use the security-review skill to audit my AWS infrastructure code for security issues and provide remediation recommendations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review AWS infrastructure code for security misconfigurations?

To review AWS infrastructure code for security misconfigurations, you can audit CDK, Terraform, CloudFormation, and SAM templates to identify overly permissive IAM policies, exposed resources, and missing encryption with actionable remediation guidance.

What is AWS IAM security auditing for infrastructure as code?

AWS IAM security auditing for infrastructure as code evaluates IAM permissions, networking controls, and encryption settings against security best practices. It helps identify and remediate security weaknesses in AWS configurations before they become production risks.

Does this security review work with Terraform and CloudFormation templates?

Yes, this security review works with Terraform and CloudFormation templates, as well as CDK and SAM resources. It evaluates these infrastructure as code formats to detect exposed resources, missing logging, and compliance gaps during AWS environment hardening.

Can I check my AWS environment for exposed resources before launch?

Yes, you can check your AWS environment for exposed resources before launch by running a security review. This process detects misconfigurations across networking controls, IAM permissions, and encryption settings, providing actionable vulnerability remediation steps.

What is the best way to harden AWS infrastructure configurations?

The best way to harden AWS infrastructure configurations is by reviewing infrastructure code against security best practices. This validates cloud templates, performs permission analysis, checks encryption settings, and provides actionable remediation for identified vulnerabilities.

Why do I need to audit IAM permissions in my AWS infrastructure?

You need to audit IAM permissions in your AWS infrastructure to find overly permissive policies and compliance gaps before production launch. Permission analysis identifies security risks and provides actionable vulnerability remediation to harden the environment.