Cloud Security Bundle

IAM hardening, posture management, misconfiguration detection, and least-privilege design.

Browse all skill bundles

Included Skills (40)

  1. Cloud Security Auditor — This tool continuously monitors multi-cloud environments for misconfigurations and compliance violations, helping security teams maintain robust posture across AWS, Azure, and GCP.
  2. AWS Security Auditor — Automate cloud security posture assessments by running ScoutSuite to enumerate AWS resources, identify misconfigurations, and generate comprehensive interactive security reports for auditors.
  3. AWS Privilege Assessment — This tool helps security professionals identify and remediate IAM misconfigurations in AWS environments to prevent unauthorized privilege escalation and improve cloud security.
  4. Iam Helper For Troubleshooting — The Iam Helper for Troubleshooting diagnoses and remediates IAM access issues on Google Cloud, enabling developers to self‑service PAM JIT activations or log structured tickets for access denials. It equips privileged administrators with authoritative policy analysis, deny‑policy exemptions, least‑privilege role discovery, and PAM/IAM provisioning, ensuring secure and efficient access management.
  5. Azure Defender Deployment — Deploys and configures Microsoft Defender for Cloud to secure multi-cloud workloads, enhance threat monitoring, and improve security posture for cloud infrastructure administrators.
  6. Cloud Compliance Orchestrator — This tool deploys AWS Security Hub to centralize security findings and automate compliance monitoring for cloud security engineers and compliance auditors.
  7. AWS Compliance Automator — This tool helps cloud security engineers implement continuous compliance monitoring and automated remediation for AWS resources across multi-account environments using AWS Config.
  8. AWS Macie Orchestrator — This skill automates Amazon Macie deployment and configuration to help security engineers discover, classify, and protect sensitive data stored within Amazon S3 buckets.
  9. Nitro Enclave Architect — This tool assists cloud security engineers in building isolated, attestation-verified confidential computing environments using AWS Nitro Enclaves to protect highly sensitive data.
  10. GCP Binary Authorization — This skill automates GCP Binary Authorization deployment, helping security engineers enforce container supply-chain integrity by validating cryptographic attestations before GKE or Cloud Run deployments.
  11. BeyondCorp Access Architect — This tool helps security engineers implement Google's BeyondCorp zero trust model to secure remote application access without relying on traditional VPN infrastructure.
  12. Falco Security Forensics — This tool automates runtime threat detection and incident response in Kubernetes environments by managing Falco rules and parsing security alerts for security engineers.
  13. Azure Lateral Detection — This skill assists security analysts in identifying lateral movement within Azure and Entra ID environments using advanced KQL hunting and log correlation.
  14. Cloud Logging Cross Project Configuration — The skill enables the configuration and troubleshooting of centralized logging across multiple Google Cloud projects, folders, or organizations, routing logs to a single central bucket. It guides the creation of cross‑project log sinks and the setup of central log buckets, ensuring efficient read‑time aggregation. This capability benefits system administrators and DevOps teams managing multi‑project environments who require unified log visibility and streamlined troubleshooting.
  15. Azure Resource Diagnostician — This tool analyzes Azure resource health, identifies underlying issues through telemetry logs, and generates actionable remediation plans for cloud infrastructure engineers.
  16. Azure Terraform Importer — This tool helps DevOps engineers convert existing Azure infrastructure into maintainable Terraform code by leveraging Azure CLI discovery and Azure Verified Modules.
  17. CloudFront Configuration Tool — Automates Amazon CloudFront configuration, enabling developers to efficiently manage content delivery and optimize performance for their applications.
  18. AWS Architecture Designer — Designs scalable and cost-effective AWS architectures using serverless patterns and IaC, assisting startups with cloud infrastructure needs.
  19. Azure PIM Configurator — This tool helps security administrators implement Zero Trust identity governance by configuring time-bound, eligible privileged role assignments within Microsoft Entra ID.
  20. Azure Blob Manager — Manage Azure Blob Storage: create containers, upload blobs, configure access tiers, and generate SAS tokens for developers and DevOps engineers.
  21. AWS Infrastructure Optimizer — Automates the identification and removal of idle AWS resources to help cloud engineers minimize operational waste and reduce monthly infrastructure costs.
  22. Dns Management — Configure DNS zones and records. Manage Route53, Cloud DNS, and self-hosted
  23. Cloud DLP Implementer — Automate sensitive data discovery, classification, and protection across cloud environments to help security engineers maintain compliance with GDPR, HIPAA, and PCI DSS standards.
  24. GCP Firewall Manager — This skill helps cloud engineers implement and audit restrictive GCP VPC firewall rules to ensure secure network segmentation and robust infrastructure protection.
  25. DynamoDB Skill Builder — This skill helps developers design and build efficient NoSQL databases using Amazon DynamoDB for scalable applications.
  26. DevOps Infrastructure Automator — This tool assists engineers by automating CI/CD pipeline generation, infrastructure as code scaffolding, and deployment management across major cloud platforms.
  27. AWS Bedrock Integrator — Deploys and manages foundation models on AWS Bedrock, enabling compliant and secure AI applications for enterprise users.
  28. Cosmos DB Manager — Manage Azure Cosmos DB resources, enabling developers to build globally distributed, multi-model database applications efficiently.
  29. Policy As Code — Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy
  30. GCP Networking — Configure VPCs, firewall rules, and Cloud NAT. Implement shared VPC and
  31. Azure Functions Builder — Automate Azure Functions development, enabling developers to build serverless applications with triggers, bindings, and durable orchestrations.
  32. AWS RDS Manager — This skill manages Amazon RDS databases, automating provisioning, backups, and scaling for developers and database administrators.
  33. AWS SQS Manager — This tool enables developers to efficiently manage Amazon SQS queues, handle message processing, and implement robust, decoupled event-driven architectures within cloud environments.
  34. EC2 Instance Manager — This skill helps DevOps engineers and developers launch and manage Amazon EC2 instances for scalable cloud compute.
  35. Google Cloud Networking Observability — The skill analyzes Google Cloud logs, metrics, and diagnostics to investigate networking issues such as dropped traffic, packet loss, and latency. It examines VPC Flow Logs, PSC, serverless connections, NAT, firewall, and threat logs, and runs Connectivity Tests to pinpoint path problems and estimate costs. Engineers and network operators use it to diagnose and resolve complex GCP networking incidents.
  36. Terraform Infrastructure Expert — This skill provides infrastructure engineers with enterprise-grade best practices for designing, testing, and deploying scalable Terraform and OpenTofu configurations and modules.
  37. Azure IoT Architect — Design comprehensive Azure IoT and Smart City solutions by creating actionable architectures, security frameworks, and phased implementation roadmaps for technical teams.
  38. Workspace Phishing Defender — This skill automates the configuration of advanced phishing and malware protection settings in Google Workspace to help administrators secure organizational email environments.
  39. AWS Context Inspector — This tool securely identifies active AWS configuration metadata to help developers verify environment settings before executing cloud tasks without exposing sensitive credentials.
  40. Azure Resource Manager — Manages Microsoft Azure resources via command line, enabling developers and operators to automate Azure operations from the terminal.

Opening your workspace…