Agent skill · security · aiskillstore
aws-iam-best-practices
IAM policy review, hardening, and least privilege implementation
Why this skill is useful
Adds multiple executable scripts for IAM policy review and management that enhance security practices beyond standard knowledge.
What it needs
Requires aws-cli installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
AWS IAM Best Practices Review and harden IAM policies following AWS security best practices and least privilege principles. When to Use Use this skill when you need to review IAM policies, implement least privilege access, or harden IAM security. Core Principles Least Privilege Grant minimum permissions needed Use managed policies when possible Avoid wildcard () permissions Regular access reviews Defense in Depth Enable MFA for all users Use IAM roles instead of access keys Implement service control policies (SCPs) Enable CloudTrail for audit Separation of Duties Separate admin and user roles Use different roles for different environments Implement approval workflows Regular permission audits IAM Security Checks Find Overly Permissive Policies MFA Enforcement Access Key Management Role and Policy Analysis IAM Policy Templates Least Privilege S3 Access MFA-Required Policy Time-Based Access IP-Restricted Access IAM Hardening Checklist User Management [ ] Enable MFA for all users [ ] Remove unused IAM users [ ] Rotate access keys every 90 days [ ] Use IAM roles instead of long-term credentials [ ] Implement password policy (length, complexity, rotation) Policy Management [ ] Replace inline policies with managed policies [ ] Remove wildcard () permissions [ ] Implement least privilege [ ] Use policy conditions (MFA, IP, time) [ ] Regular policy reviews Role Management [ ] Use roles for EC2 instances [ ] Implement cross-account roles properly [ ] Review trust relationships [ ] Remove unused roles [ ] Use session tags for fine-grained access Monitoring [ ] Enable CloudTrail for IAM events [ ] Set up CloudWatch alarms for IAM changes [ ] Use AWS IAM Access Analyzer [ ] Regular access reviews [ ] Monitor for privilege escalation Automated IAM Hardening Example Prompts "Review my IAM policies for security issues" "Find users without MFA enabled" "Create a least privilege policy for S3 access" "Identify overly permissive IAM roles" "Generate an IAM hardening report" Best Prac …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/aws-iam-best-practices