DevOps & Infrastructure
AWS Security
AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN segmentation and DNS Firewall security-control suitability, certificate renewal ownership and monitoring, incident response triage ownership, centralized security log store (CloudWatch or Security Lake). Also factual configuration, findings, data sources and severity scoring for GuardDuty, Inspector, Security Hub V2/OCSF (Exposure, connectors, automation), Security Hub CSPM/ASFF (standards, controls), Macie, Detective, Security Lake, AWS Security Incident Response membership and case coverage, and Organizations security policies. Applies to advisory security-service choices even when one service is named. Implementation, rule or code authoring, deployment, scans and troubleshooting outside these factual procedures belong to specialist skills. Supports local AWS CLI and AWS MCP.
- Publisher / source
- aws/agent-toolkit-for-aws (found on skills.sh)
- Upstream record
- aws/agent-toolkit-for-aws
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
1967fdc122c2a1be247301a81e157eae52cf5a005936d4185a3d8e2d98a73624