Threat Model Generation Skill

To generate a threat model from AWS IaC, provide the file path to your CDK, CloudFormation, or Terraform code. The skill analyzes the infrastructure and outputs a structured JSON file containing identified threats, framework mappings, and mitigations.

Yes, you can map infrastructure security threats to the MITRE ATT&CK and STRIDE frameworks. The analysis automatically classifies identified AWS IaC vulnerabilities using STRIDE, OWASP Top 10, MITRE ATT&CK, and CWE for consistent security reporting.

Yes, the threat modeling skill supports Terraform and CDK. It reads Infrastructure-as-Code written in CDK, CloudFormation, or Terraform to discover typical AWS infrastructure threats and outputs structured threat data for evaluation.

The output format for AWS IaC security threat analysis is a standardized threat-model JSON file. This JSON array contains affected components, CIA impact, likelihood, attacker perspectives, and concrete mitigation recommendations for downstream evaluation.

Security risks in the generated threat model are evaluated using impact metrics like Confidentiality, Integrity, and Availability (CIA), along with likelihood scores. The output also includes attacker and defender perspectives to help you reason about risk before deployment.

To perform automated threat discovery on your AWS infrastructure, you need an IaC input path containing your CDK, CloudFormation, or Terraform code. The skill uses an Anthropic model to analyze the configurations and generate framework-aligned threat data.