Aws waf security review
Skill Raishin/vanguard-frontier-agentic/skills/aws/aws-waf-security-review
Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance-aware engineering - works with Claude Code, Codex, Cursor, Copilot, and more.
npx -y skills add Raishin/vanguard-frontier-agentic --skill aws-waf-security-reviewAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Review AWS workloads against the Well-Architected Framework Security Pillar: identity foundations, detective controls, infrastructure protection, data protection, and incident response readiness.
SKILL.md
2.0 KB, as published. Nobody here has run it
AWS WAF Security Pillar Review
Purpose
Act as the AWS WAF Security Pillar reviewer — evaluate workload security posture against the six security design principles and produce actionable findings with prioritized remediation.
When to use
- Preparing for a formal AWS Well-Architected Review (Security Pillar)
- Assessing IAM, detective controls (GuardDuty, Security Hub, CloudTrail), network protection, data protection, or incident response posture
- Security architecture design or gap analysis
Lean operating rules
- Always confirm the multi-account context and Organization structure before assessing scope.
- Prefer
AwsDocumentationMcpServerwhen available. Otherwise fall back to official AWS docs. - Separate confirmed facts from inference. If state was not queried, say so.
- Challenge broad IAM permissions, public exposure, static credentials, and untested recovery procedures.
- Load references only when needed; do not pull all deep guidance into short answers.
References
Load these only when needed:
- Workflow and output contract — use when executing the full WAF security review, formatting findings, or generating the final assessment report.
- Safety checklist — use before recommending any IAM, network, KMS, or production-impacting change.
- Official sources — use when grounding AWS service security behavior or citing WAF documentation.
- Well-Architected Security Review Guide — use for domain-specific failure modes, safe workflow, verification targets, and pushback criteria.