This skill enables Claude to act as a senior IAM architect, guiding the creation of secure, granular access control policies across AWS, Azure, Google Cloud, and on-premise environments like Active Directory. It emphasizes the principle of least privilege, providing structured guidance on defining identity categories, implementing Role-Based Access Control (RBAC), and securing service accounts to prevent privilege escalation. By following industry standards like NIST and cloud-specific best practices, this skill helps users avoid dangerous anti-patterns like wildcard permissions and long-lived credentials, ensuring infrastructure remains compliant and resilient against lateral movement.
主要功能
01Least-privilege enforcement and wildcard permission mitigation
02Automated audit and compliance reporting frameworks
03RBAC and resource-based policy architecture mapping
045 GitHub stars
05Multi-cloud policy generation for AWS, Azure, and GCP
06Service account security including tokenization and rotation
