Agent skill · security · aiskillstore
aws-security-audit
Comprehensive AWS security posture assessment using AWS CLI and security best practices
Why this skill is useful
Adds multiple executable scripts for comprehensive AWS security assessments that aren't available in public documentation.
What it needs
Requires aws-cli installed locally. About 5k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
AWS Security Audit Perform comprehensive security assessments of AWS environments to identify vulnerabilities and misconfigurations. When to Use Use this skill when you need to audit AWS security posture, identify vulnerabilities, or prepare for compliance assessments. Audit Categories Identity & Access Management Overly permissive IAM policies Unused IAM users and roles MFA enforcement gaps Root account usage Access key rotation Network Security Open security groups (0.0.0.0/0) Public S3 buckets Unencrypted data in transit VPC flow logs disabled Network ACL misconfigurations Data Protection Unencrypted EBS volumes Unencrypted RDS instances S3 bucket encryption disabled Backup policies missing KMS key rotation disabled Logging & Monitoring CloudTrail disabled CloudWatch alarms missing VPC Flow Logs disabled S3 access logging disabled Config recording disabled Security Audit Commands IAM Security Checks Network Security Checks Data Protection Checks Logging & Monitoring Checks Automated Security Audit Script Security Score Calculator Compliance Mapping CIS AWS Foundations Benchmark 1.1: Root account usage 1.2-1.14: IAM policies and MFA 2.1-2.9: Logging (CloudTrail, Config, VPC Flow Logs) 4.1-4.3: Monitoring and alerting PCI-DSS Requirement 1: Network security controls Requirement 2: Secure configurations Requirement 8: Access controls and MFA Requirement 10: Logging and monitoring HIPAA Access controls (IAM) Audit controls (CloudTrail) Encryption (EBS, RDS, S3) Transmission security (TLS/SSL) Remediation Priorities Critical (Fix Immediately) Root account access keys Public RDS snapshots Security groups open to 0.0.0.0/0 on sensitive ports CloudTrail disabled High (Fix Within 7 Days) Users without MFA Unencrypted data at rest Missing VPC Flow Logs Overly permissive IAM policies Medium (Fix Within 30 Days) Old access keys (>90 days) Missing S3 access logging Unused IAM users KMS key rotation disabled Example Prompts "Run a comprehensive security audit on my AWS account …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/aws-security-audit