Does it support attaching policies to specific OUs?

Yes, when invoking the skill, you can specify whether the target-type is 'ou' or 'org-root'.

Can I use this for existing AWS Organizations?

Yes, as long as your organization is managed via the Terraform structure provided in the aws-organization-governance repository.

How does it ensure Terraform code quality?

The skill automatically runs 'terraform fmt' and 'terraform validate' after scaffolding to ensure the code meets syntax standards.

What files does the new-scp skill generate?

It creates a new JSON policy file and updates main.tf, outputs.tf, and GitHub Action validation scripts within the repository.

Does this skill write the actual security logic?

It scaffolds the structure and adds a placeholder deny statement; the user then edits the generated JSON to add specific AWS actions and resources.

AWS SCP Scaffolder

Name: AWS SCP Scaffolder
Author: gamaware

bygamaware

0•

云基础设施

Automates the creation and deployment of AWS Service Control Policies using Terraform and JSON.

This skill streamlines AWS Organizations governance by scaffolding all necessary components for a new Service Control Policy (SCP). It automatically generates JSON policy files with standardized naming conventions, updates Terraform resource definitions and outputs, integrates validation scripts for CI/CD pipelines, and ensures code consistency. It is ideal for security engineers and DevOps professionals looking to enforce organizational guardrails quickly while maintaining a clean, production-ready Infrastructure as Code (IaC) repository.

主要功能

01Strict adherence to PascalCase, snake_case, and kebab-case naming conventions

02Automated JSON policy scaffolding with valid IAM structure

03Terraform resource and attachment generation for OUs or Org Roots

04Built-in formatting and syntax validation via Terraform CLI

050 GitHub stars

06Automatic configuration of Terraform outputs and validation scripts

使用场景

01Enforcing security guardrails on specific Organizational Units (OUs)

02Implementing data protection policies to prevent unauthorized S3 bucket access

03Restricting AWS regions across an organization to ensure compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add gamaware/aws-organization-governance new-scp

For use in Claude.ai and ChatGPT

主要功能

01Strict adherence to PascalCase, snake_case, and kebab-case naming conventions

02Automated JSON policy scaffolding with valid IAM structure

03Terraform resource and attachment generation for OUs or Org Roots

04Built-in formatting and syntax validation via Terraform CLI

050 GitHub stars

06Automatic configuration of Terraform outputs and validation scripts

使用场景

01Enforcing security guardrails on specific Organizational Units (OUs)

02Implementing data protection policies to prevent unauthorized S3 bucket access

03Restricting AWS regions across an organization to ensure compliance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add gamaware/aws-organization-governance new-scp

For use in Claude.ai and ChatGPT