Agent skill · security · aradotso
ikb42603-cloud-security-labs
AWS cloud computing security essentials lab exercises covering IAM, encryption, network security, and monitoring
Why this skill is useful
Provides specific AWS CLI commands and configurations for implementing cloud security best practices that the AI wouldn't generate reliably on its own.
What it needs
Requires awscli, git installed locally. Requires aws account access. About 9k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
IKB42603 Cloud Security Labs Skill Skill by ara.so — Security Skills collection. Overview This project provides hands-on laboratory exercises for learning AWS cloud computing security essentials. It covers five core security domains: account security and IAM, secure isolation and multitenancy, encryption and key management, access control and network security, and monitoring/logging/incident detection. The labs are designed for educational purposes and follow a structured approach to implementing AWS security best practices using real AWS services. Repository Structure The project organizes labs into separate markdown files: Prerequisites Required Tools 1. AWS Account - Free tier eligible 2. AWS CLI - Command line interface for AWS services 3. Git - Version control 4. Text Editor - VS Code, Vim, or similar AWS CLI Installation AWS CLI Configuration Lab 1: Account Security and IAM Creating IAM Users Creating IAM Groups and Roles Enabling MFA Custom IAM Policy Example Apply custom policy: Lab 2: Secure Isolation and Multitenancy Creating VPC with Subnets Internet Gateway and Route Tables NAT Gateway for Private Subnet Lab 3: Encryption and Key Management Creating KMS Keys S3 Bucket Encryption EBS Volume Encryption RDS Encryption Lab 4: Access Control and Network Security Security Groups Network ACLs VPC Flow Logs Lab 5: Monitoring, Logging, and Incident Detection CloudTrail Setup CloudWatch Alarms CloudWatch Logs Insights Queries GuardDuty Enablement Common Patterns Lab Documentation Structure Each lab should follow this structure in its markdown file: Resource Cleanup Script Troubleshooting AWS CLI Authentication Issues Permission Denied Errors VPC Connectivity Issues S3 Encryption Issues CloudTrail Not Logging Best Practices 1. Always tag resources with Lab and Environment tags for easy identification 2. Use least privilege when creating IAM policies 3. Enable MFA on all user accounts 4. Encrypt sensitive data at rest and in transit 5. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/ikb42603-cloud-security-labs