cloud-security - Assess cloud configurations for security risks
Assesses AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, network risks, and IaC security gaps.
Tags
Updated: 2026-10-02Capabilities
What this skill does
- Analyze IAM escalation paths
- Assess S3 public exposure
- Analyze security group rules
- Review IaC security gaps
- Map findings to MITRE ATT&CK
- Apply severity modifiers
Inputs
- IAM policy documents
- S3 bucket configurations
- Security group rules
- Infrastructure-as-code definitions
- Cloud provider API data
- Severity modifier context
Outputs
- Security posture findings
- Severity classifications
- MITRE ATT&CK mappings
- Least-privilege suggestions
- JSON check results
- Process exit codes
Requirements
- Read access to IAM policies
- Read access to S3 configurations
- Read access to security group rules
- Python 3 environment
- Cloud provider API integration for continuous monitoring