Cloud Audit
briiirussell/cybersecurity-skills
Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps.
IAM policy review, hardening, and least privilege implementation
Install AWS Iam Best Practices
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install aiskillstore/marketplace aws-iam-best-practices --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .claude/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .claude/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practicesType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install aiskillstore/marketplace aws-iam-best-practices --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .agents/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .agents/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install aiskillstore/marketplace aws-iam-best-practices --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .cursor/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .cursor/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/aiskillstore/marketplace.git --path skills/sickn33/aws-iam-best-practices--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install aiskillstore/marketplace aws-iam-best-practices --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .gemini/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .gemini/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install aiskillstore/marketplace aws-iam-best-practicesInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .github/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .github/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install aiskillstore/marketplace aws-iam-best-practices --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/sickn33/aws-iam-best-practices .opencode/skills/aws-iam-best-practices && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "aws-iam-best-practices" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/aws-iam-best-practices into .opencode/skills/aws-iam-best-practices/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aws-iam-best-practices", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
aws-iam-best-practices- GitHub stars
- 433
- Used in
- 4 other repos
- Token cost
- ~2.6k tokens
- SKILL.md length
- 361 words
- Files
- 2
- Skills in repo
- 1,044
- Repo updated
- First seen
- Licence
- None found
At a glance
IAM policy review, hardening, and least privilege implementation
- Tasks that involve Cloud security
- SKILL.md covers When to Use, Core Principles, IAM Security Checks and IAM Policy Templates, plus 7 more sections
- Calls aws; needs OLD_KEY and AWS_ACCESS_KEY_ID
What it does
AWS Iam Best Practices is an agent skill from aiskillstore/marketplace. IAM policy review, hardening, and least privilege implementation
Its SKILL.md is about 2.6k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `skill-report.json`).
It sits in Security, covering Cloud security. It works with Amazon Web Services. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.
When your agent uses it
- Tasks that involve Cloud security
Example prompts
- “/aws-iam-best-practices”
Requirements
- Python 3
- A credential in OLD_KEY
- A credential in NEW_KEY
What it can do on your machine
Read from SKILL.md and the folder at commit 44923f3. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
aws
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
docs.aws.amazon.compolicysim.aws.amazon.comaws.amazon.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
OLD_KEYAWS_ACCESS_KEY_IDNEW_KEY
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
AWS Iam Best Practices loads about 2.6k tokens when it runs. Until then it costs about 22 tokens; SKILL.md has 361 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 361 words (~2,617 tokens).
“Review and harden IAM policies following AWS security best practices and least privilege principles.”
- name
- aws-iam-best-practices
- category
- security
- risk
- safe
- source
- community
- tags
- [aws, iam, security, access-control, kiro-cli, least-privilege]
- date_added
- 2026-02-27
Files
SKILL.md and 1 other file in skills/sickn33/aws-iam-best-practices of aiskillstore/marketplace.
- SKILL.md
- skill-report.json
Open the folder on GitHubat commit 44923f3
Used in 4 other repositories
We found 13 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 4 other GitHub owners. This page covers the copy in aiskillstore/marketplace, which our catalogue first saw on October 7, 2026.
- sickn33/agentic-awesome-skillsskills/security/aws-iam-best-practicesplugins/agentic-awesome-skills/skills/security/aws-iam-best-practices+1 more
- lingxling/awesome-skills-cnantigravity-awesome-skills/skills/security/aws-iam-best-practicesantigravity-awesome-skills/plugins/agentic-awesome-skills/skills/security/aws-iam-best-practices+1 more
- benjaminasterA/antigravity-awesome-skillsskills/security/aws-iam-best-practices
- henryalouf/ruflow.agents/skills/security/aws-iam-best-practices.agents/skills/antigravity-awesome-skills/skills/security/aws-iam-best-practices+4 more
Compare with similar skills
AWS Iam Best Practices next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| AWS Iam Best Practices this skillaiskillstore/marketplace | 433 | 4 repos | ~2.6k | Automated safety check: Pass | None | |
| Cloud Auditbriiirussell/cybersecurity-skills | 413 | — | ~1.3k | Automated safety check: Notes | MIT | |
| Iamitsmostafa/aws-agent-skills | 1.2k | — | ~1.8k | Automated safety check: Pass | MIT | |
| AWS Security ArchitectureHack23/cia | 239 | — | ~2.3k | Automated safety check: Pass | Apache-2.0 | |
| AWS Iamsickn33/agentic-awesome-skills | 47k | 2 repos | ~3.4k | Automated safety check: Pass | MIT | |
| Performing AWS Account Enumeration With Scout Suitemukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~1.9k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Iam
itsmostafa/aws-agent-skills
AWS Identity and Access Management for users, roles, policies, and permissions.
AWS Security Architecture
Hack23/cia
AWS security best practices, VPC security, IAM, KMS, CloudTrail, GuardDuty for CIA platform deployment
AWS Iam
sickn33/agentic-awesome-skills
Manage IAM users, roles, and policies. An agent skill from sickn33/agentic-awesome-skills.
Performing AWS Account Enumeration With Scout Suite
mukul975/Anthropic-Cybersecurity-Skills
Run the agentless, open-source ScoutSuite tool (via pip install and the scout CLI) against an AWS account to enumerate resources across services, identify misconfigurations, and generate an…
Auditing Cloud With Cis Benchmarks
mukul975/Anthropic-Cybersecurity-Skills
Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking…
More from aiskillstore/marketplace
All 1,040 skills in this repoCode Stats
aiskillstore/marketplace
Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).
Data Processing
aiskillstore/marketplace
Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.
Doc Scanner
aiskillstore/marketplace
Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.
File Search
aiskillstore/marketplace
Modern file and content search using fd, ripgrep (rg), and fzf.
Find Replace
aiskillstore/marketplace
Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.
Project Planner
aiskillstore/marketplace
Detects stale project plans and suggests session commands. An agent skill from aiskillstore/marketplace.
Related
Works with
Categories
Questions about AWS Iam Best Practices
What does AWS Iam Best Practices do?
IAM policy review, hardening, and least privilege implementation. AWS Iam Best Practices is an agent skill from aiskillstore/marketplace.
When should I use AWS Iam Best Practices?
AWS Iam Best Practices fits situations like: tasks that involve Cloud security.
How do I install AWS Iam Best Practices in Claude Code?
Run `npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a claude-code`. Or copy the skill folder (skills/sickn33/aws-iam-best-practices in aiskillstore/marketplace) into .claude/skills/aws-iam-best-practices in your project. Claude Code loads it when a task matches its description.
How do I install AWS Iam Best Practices in Codex?
Run `npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a codex`. Or copy the skill folder (skills/sickn33/aws-iam-best-practices in aiskillstore/marketplace) into .agents/skills/aws-iam-best-practices in your project. Codex loads it when a task matches its description.
Can I use AWS Iam Best Practices in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill aws-iam-best-practices -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/aws-iam-best-practices, .gemini/skills/aws-iam-best-practices, .github/skills/aws-iam-best-practices and .opencode/skills/aws-iam-best-practices in your project.
What does AWS Iam Best Practices need to run?
Going by SKILL.md and its folder, AWS Iam Best Practices needs the command-line tools its instructions call (aws) and credentials named OLD_KEY, AWS_ACCESS_KEY_ID and NEW_KEY. Our summary lists: Python 3; A credential in OLD_KEY; A credential in NEW_KEY.
Does AWS Iam Best Practices access the network?
SKILL.md names 3 domains. As links in the text: docs.aws.amazon.com, policysim.aws.amazon.com and aws.amazon.com. This is read from the text; nothing was executed.
Is AWS Iam Best Practices safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does AWS Iam Best Practices use?
No licence was found for AWS Iam Best Practices or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does AWS Iam Best Practices use?
About 2.6k tokens (SKILL.md is roughly 10k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to AWS Iam Best Practices?
Skills that share tags, products or a category with AWS Iam Best Practices: Cloud Audit (briiirussell/cybersecurity-skills, 413 stars), Iam (itsmostafa/aws-agent-skills, 1.2k stars), AWS Security Architecture (Hack23/cia, 239 stars) and AWS Iam (sickn33/agentic-awesome-skills, 47k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains AWS Iam Best Practices?
aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 433 GitHub stars. The repository holds 1,044 skills in this directory. The repository was last updated on October 10, 2026.
Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.