aws-security-audit
Comprehensive AWS security posture assessment using AWS CLI and security best practices
Profile →npx skills add sickn33/agentic-awesome-skills --skill aws-security-audit --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# AWS Security Audit Perform comprehensive security assessments of AWS environments to identify vulnerabilities and misconfigurations. ## When to Use Use this skill when you need to audit AWS security posture, identify vulnerabilities, or prepare for compliance assessments. ## Audit Categories **Identity & Access Management** - Overly permissive IAM policies - Unused IAM users and roles - MFA enforcement gaps - Root account usage - Access key rotation **Network Security** - Open security groups (0.0.0.0/0) - Public S3 buckets - Unencrypted data in transit - VPC flow logs disabled - Network ACL misconfigurations **Data Protection** - Unencrypted EBS volumes - Unencrypted RDS instances - S3 bucket encryption disabled - Backup policies missing - KMS key rotation disabled **Logging & Monitoring** - CloudTrail disabled - CloudWatch alarms missing - VPC Flow Logs disabled - S3 access logging disabled - Config recording disabled ## Security Audit Commands ### IAM Security Checks ```bash # List users without MFA aws iam get-credential-report --output text | \ awk -F, '$4=="false" && $1!="<root_account>" {print $1}' # Find unused IAM users (no activity in 90 days) aws iam list-users --query
- When to Use
- Audit Categories
- Security Audit Commands
- IAM Security Checks
- Network Security Checks
- Data Protection Checks
- Logging & Monitoring Checks
- Automated Security Audit Script
- Security Score Calculator
- Compliance Mapping
- Remediation Priorities
- Example Prompts
- Best Practices
- Kiro CLI Integration
List users without MFA
aws iam get-credential-report --output text | \
awk -F, '$4=="false" && $1!="<root_account>" {print $1}'
Find unused IAM users (no activity in 90 days)
aws iam list-users --query 'Users[*].[UserName]' --output text | \
while read user; do
echo "$user: $last_used"
done
List overly permissive policies (AdministratorAccess)
aws iam list-policies --scope Local \What does the aws-security-audit skill do?
Comprehensive AWS security posture assessment using AWS CLI and security best practices
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill aws-security-audit --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.