skills.rest
probationer070
probationer070COMMUNITY
Explore all skills by this author →
GitHub

Security Review

Review Terraform and Lambda configurations for security vulnerabilities.

Updated May 30, 2026
Search Tags:#security#AWS#Terraform#IAM#Lambda
One-click install
npx skills add https://github.com/probationer070/Cloud-Project --skill security-review-probationer070
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Review
Source: https://github.com/probationer070/Cloud-Project/tree/main/.claude/skills/security
Command: npx skills add https://github.com/probationer070/Cloud-Project --skill security-review-probationer070

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps developers maintain security best practices in their Terraform and Lambda configurations by providing a comprehensive review of IAM roles, policies, and other security settings.

Core Features & Use Cases

  • IAM Role and Policy Review: Checks for common security issues in IAM roles and policies, such as wildcard actions and scoped ARNs.
  • Infrastructure Resource Security: Validates S3 bucket public access settings and server-side encryption configurations.
  • Lambda Function Security: Inspects Lambda function code for hardcoded secrets and secure logging practices.
  • SSM Parameter Store Usage: Ensures secure usage of the AWS Systems Manager Parameter Store.
  • Remote State Management: Validates backend configuration for remote state management.
  • Use Case: After making changes to Terraform or Lambda configurations, use this Skill to quickly identify and address potential security vulnerabilities before deploying code.

Quick Start

Run the security review after modifying any Terraform or Lambda code with the command /security.

Frequently Asked Questions about Security Review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Terraform configurations for IAM security issues like wildcard actions?▼

To check Terraform configurations for IAM security issues, you can review IAM roles and policies for wildcard actions and improperly scoped ARNs. This validates your AWS infrastructure against security best practices before deployment.

What is the best way to scan Lambda function code for hardcoded secrets?▼

Scanning Lambda function code for hardcoded secrets involves inspecting the codebase to identify unencrypted sensitive values and verify secure logging practices. This process detects potential vulnerabilities in your AWS serverless application configurations.

How do I validate S3 bucket encryption and public access settings in Terraform?▼

Validating S3 bucket encryption and public access settings in Terraform requires reviewing your infrastructure resource definitions. This ensures server-side encryption configurations are present and public access restrictions are properly enforced.

Can I use an automated security review for AWS SSM Parameter Store usage?▼

Yes, you can use an automated security review for AWS SSM Parameter Store usage to ensure secure parameter handling. This checks your Terraform and Lambda configurations for proper secret management and remote state backend validation.

When should I run a security review on my AWS Terraform and Lambda code?▼

You should run a security review on AWS Terraform and Lambda code after making configuration changes and before deployment. This identifies vulnerabilities like missing encryption and wildcard actions early in the development workflow.

Related Skills

Explore More Software Engineering Skills→
MybonoMybono
100

aws-cloud-patterns

Automate AWS Lambda, DynamoDB, and API Gateway deployment with CDK or Terraform.

Community
Advanced
AradotsoAradotso
5

terraform-data-engineering-infrastructure

Provision AWS data engineering infrastructure with Terraform.

Official
Advanced
lloydchanglloydchang
2

iac-deployment-validator

Validate Terraform, Kubernetes manifests, and Helm charts for security, cost, and compliance.

Community
Advanced
zebbernzebbern
4.5k

AWS Penetration Testing

Enumerate AWS IAM misconfigurations and privilege escalation paths.

Community
Advanced