Software Development
AWS IAM
Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits, Organizations quirks, and SAML/MFA specifics. Also provides structured workflows for IAM role management and baseline policy generation from application source code or a Terraform plan JSON. Covers condition operator safety (ForAnyValue/ForAllValues with Null checks), bucket policy deny patterns (VPC endpoint restrictions, org paths), confused deputy protection, and service role creation for AWS services (Glue, CloudTrail, Lambda, ECS, etc.) with aws:SourceAccount/aws:SourceArn trust conditions. Applies when creating IAM roles, writing IAM or bucket policies, generating policies from application source code or a Terraform plan JSON, working with STS, Organizations, or condition operators, or any task needing a service or execution role. Does not cover non-IAM authorization like Cognito user-pool policies or app-level RBAC.
- Publisher / source
- aws/agent-toolkit-for-aws (found on skills.sh)
- Upstream record
- aws/agent-toolkit-for-aws
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
27f4733539913bf46e6ab23cc4aee00e7973c15e876c25bf86bac6dc9cb5057f