Agent skill · security · aradotso

ikb42603-cloud-security-essentials

AWS cloud security lab exercises covering IAM, VPC, encryption, monitoring, and incident detection for hands-on security learning

Why this skill is useful

Adds executable scripts for AWS IAM, VPC setup, and monitoring that enhance cloud security capabilities.

What it needs

Requires aws-cli, git installed locally. Requires aws account access. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.

What this skill does

IKB42603 Cloud Security Essentials Skill Skill by ara.so — Security Skills collection. Overview IKB42603-CLOUD-COMPUTING-SECURITY-ESSENTIALS is an educational repository containing hands-on laboratory exercises for learning AWS cloud security fundamentals. The project covers five core security domains: IAM and account security, secure isolation and multitenancy, encryption and key management, access control and network security, and monitoring/logging/incident detection. This skill helps developers and students complete practical AWS security implementations using the AWS Console, AWS CLI, and infrastructure-as-code approaches. Repository Structure The project is organized into five lab modules: Installation & Setup Clone the Repository Prerequisites AWS Account (Free Tier eligible) AWS CLI installed and configured Git for version control Text editor (VS Code, Vim, etc.) Configure AWS CLI Lab 1: Account Security and IAM Create IAM Users with Policies Enable MFA for Root Account Create IAM Groups with Least Privilege Lab 2: Secure Isolation and Multitenancy Create Isolated VPC Configure Security Groups Create Network ACLs Lab 3: Encryption and Key Management Create KMS Key Encrypt S3 Bucket with KMS Encrypt EBS Volume Encrypt Data at Application Level Lab 4: Access Control and Network Security Create VPC Endpoints Configure AWS WAF Configure AWS Systems Manager Session Manager Lab 5: Monitoring, Logging, and Incident Detection Enable CloudTrail Configure CloudWatch Alarms Query CloudTrail Logs with Athena Configure AWS GuardDuty Common Patterns Secure EC2 Instance Launch Rotate IAM Access Keys Automated Security Group Auditing Troubleshooting IAM Permission Errors VPC Connectivity Issues KMS Key Access Issues CloudTrail Logging Not Working Environment Variables Documentation Best Practices Each lab should include: Best Practices 1. Always use least privilege: Grant minimum permissions required 2. Enable MFA: For all human users, especially privileged accounts 3. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills aradotso/ikb42603-cloud-security-essentials

View the source on GitHub

Browse the @skills marketplace