terraform-infra-analyzer

Name: terraform-infra-analyzer
Availability: InStock
Author: foo-x

Analyze Terraform state files for AWS network and IAM misconfigurations.

2|1|Updated Feb 2, 2019

Search Tags:#security #aws #infrastructure #terraform #iam #network analysis

Ready to run

npx skills add https://github.com/Foo-x/dotfiles --skill terraform-infra-analyzer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: terraform-infra-analyzer
Source: https://github.com/Foo-x/dotfiles/tree/main/claude/skills/terraform-infra-analyzer
Command: npx skills add https://github.com/Foo-x/dotfiles --skill terraform-infra-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify potential security vulnerabilities and misconfigurations in AWS infrastructure defined by Terraform, focusing on network connectivity and IAM permissions.

Core Features & Use Cases

Network Connectivity Analysis: Detects overly permissive security group rules, internet exposure, and potential communication issues between resources.
IAM Permission Analysis: Identifies overly broad IAM policies, sensitive action usage, and potential permission gaps.
Use Case: Before deploying a new Terraform module, use this Skill to perform a security review of the intended network access and IAM roles to ensure compliance and prevent security breaches.

Quick Start

Analyze the Terraform project's AWS infrastructure for network and permission issues.

Frequently Asked Questions about terraform-infra-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I analyze Terraform state files for AWS security vulnerabilities?▼

Terraform state files can be analyzed for AWS security vulnerabilities using Python scripts that parse the files to identify overly permissive security group rules, internet exposure, and IAM misconfigurations, generating detailed reports on potential security risks.

What is the best way to check IAM permissions and network connectivity in AWS infrastructure?▼

Checking IAM permissions and network connectivity in AWS infrastructure involves analyzing Terraform state files to identify overly broad IAM policies, sensitive action usage, and potential communication issues between resources.

Can I detect overly permissive security group rules before deploying a Terraform module?▼

Yes, you can detect overly permissive security group rules before deploying a Terraform module by performing a security review of the Terraform state files to ensure compliance and prevent security breaches.

Does this AWS infrastructure analysis work with existing Terraform state files?▼

Yes, AWS infrastructure analysis works directly with existing Terraform state files, utilizing Python scripts to parse the tfstate files and evaluate network access and IAM roles for security compliance.

What types of IAM misconfigurations can be identified in Terraform state files?▼

IAM misconfigurations identified in Terraform state files include overly broad IAM policies, sensitive action usage, and potential permission gaps within the AWS infrastructure.