Access Control Auditor

概要

The Access Control Auditor skill provides automated security analysis for authentication and authorization frameworks across cloud environments, network resources, and application code. By systematically reviewing IAM policies, network ACLs, and user permission structures, the skill identifies potential privilege escalation paths and compliance gaps. It translates complex security configurations into actionable reports with prioritized remediation steps, helping developers maintain a least-privilege architecture and adhere to industry security standards.

主な機能

• Detailed analysis of Network ACLs and VPC security configurations
• Generation of prioritized remediation reports with specific code examples
• Automated scanning of IAM policies and cloud environment permissions
• Identification of privilege escalation risks and overly permissive access
• 0 GitHub stars
• Compliance mapping against OWASP, GDPR, HIPAA, and PCI-DSS standards

ユースケース

• Validating application-level authorization logic during security-focused code reviews
• Reviewing VPC network ACLs to identify unauthorized access points or exposure risks
• Auditing AWS IAM roles to ensure adherence to the principle of least privilege