skills.rest
expeor
expeorCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify and remediate AWS security gaps using a structured review checklist.

Updated Aug 23, 2026
Search Tags:#security#vulnerability#aws#logging#validation#compliance#credentials
One-click install
npx skills add https://github.com/expeor/aws-automation --skill security-review-expeor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/expeor/aws-automation/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/expeor/aws-automation --skill security-review-expeor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security review checklist helps teams identify and remediate common AWS security misconfigurations, such as credential exposure, improper input validation, and insecure logging practices.

Core Features & Use Cases

  • AWS credential hygiene checks (no hard-coded credentials, use profiles or environment variables)
  • Input validation checks (account IDs, regions, ARNs)
  • Sensitive data logging guidelines and avoidance of credential leakage
  • A structured review workflow suitable for audits and governance

Quick Start

Follow the checklist to begin a security review of your AWS environment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an AWS security review for IAM and S3 misconfigurations?▼

An AWS security review identifies and remediates misconfigurations using a structured checklist that validates IAM policies, S3 bucket permissions, and network configurations to ensure compliance and credential hygiene.

What should an AWS credential hygiene check include to prevent exposure?▼

An AWS credential hygiene check should verify that no hard-coded credentials exist in code, enforce the use of IAM profiles or environment variables, and ensure sensitive data logging practices avoid leaking credentials.

How do I validate AWS inputs like account IDs, regions, and ARNs during a security audit?▼

Validating AWS inputs during a security audit involves applying a structured review checklist to verify account IDs, regions, and ARNs, ensuring proper input validation and reducing the risk of misconfigured resources.

Can I use a security review checklist for AWS governance and compliance workflows?▼

Yes, a security review checklist codifies best practices into a reusable, check-driven process suitable for AWS governance workflows, code reviews, and security audits to assess risk across IAM, KMS, and network configurations.

What is the best way to prevent sensitive data logging in AWS environments?▼

The best way to prevent sensitive data logging is applying a security review checklist that establishes guidelines to avoid credential leakage and ensure sensitive data is not improperly logged across AWS services.

Does an AWS security audit cover KMS key configurations and network settings?▼

Yes, an AWS security audit covers KMS key configurations and network settings by applying a structured review checklist that assesses risk and remediates security gaps across IAM, KMS, S3, and network environments.

Related Skills

Explore More Legal & Compliance Skills→
dl-alexandredl-alexandre

aws-cli

Configure AWS CLI profiles and verify credentials before executing commands.

Community
Intermediate
lloydchanglloydchang
2

analyze-security

Analyze AWS, Azure, GCP, and on-prem environments for vulnerabilities and misconfigurations.

Community
Advanced
subhamay-bhattacharyyasubhamay-bhattacharyya

aws-config-iam-policies

Create and validate AWS IAM policies for Snowflake data lake access.

Official
Intermediate
GhostPWNGhostPWN
4

Cloud Security & Container Hardening

Audit cloud environments and infrastructure as code for security misconfigurations.

Official
Advanced