Cloud security configuration

Skill ulpi-io/plugin-marketplace/plugins/aj-geddes/skills/cloud-security-configuration

A curated collection of 7,800+ agent skills for Claude Desktop, sourced from skills.sh

Install

npx -y skills add ulpi-io/plugin-marketplace --skill cloud-security-configuration

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Implement comprehensive cloud security across AWS, Azure, and GCP with IAM, encryption, network security, compliance, and threat detection.

SKILL.md

2.8 KB, 587 tokens by cl100k_base, as published. Nobody here has run it

Overview

Cloud security requires comprehensive strategies spanning identity management, encryption, network controls, compliance, and threat detection. Implement defense-in-depth with multiple layers of protection and continuous monitoring.

When to Use

Protecting sensitive data in cloud
Compliance with regulations (GDPR, HIPAA, PCI-DSS)
Implementing zero-trust security
Securing multi-cloud environments
Threat detection and response
Identity and access management
Network isolation and segmentation
Encryption and key management

Quick Start

Minimal working example:

# Enable GuardDuty (threat detection)
aws guardduty create-detector \
  --enable \
  --finding-publishing-frequency FIFTEEN_MINUTES

# Enable CloudTrail (audit logging)
aws cloudtrail create-trail \
  --name organization-trail \
  --s3-bucket-name audit-bucket \
  --is-multi-region-trail

# Enable S3 bucket encryption by default
aws s3api put-bucket-encryption \
  --bucket my-bucket \
  --server-side-encryption-configuration '{
    "Rules": [{
      "ApplyServerSideEncryptionByDefault": {
        "SSEAlgorithm": "aws:kms",
        "KMSMasterKeyID": "arn:aws:kms:region:account:key/key-id"
      },
      "BucketKeyEnabled": true
    }]
  }'

# Enable VPC Flow Logs
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
AWS Security Configuration	AWS Security Configuration
Terraform Security Configuration	Terraform Security Configuration
Azure Security Configuration	Azure Security Configuration
GCP Security Configuration	GCP Security Configuration

Best Practices

✅ DO

Implement least privilege access
Enable MFA everywhere
Use service accounts for applications
Encrypt data at rest and in transit
Enable comprehensive logging
Implement network segmentation
Use secrets management
Enable threat detection
Regular security assessments
Keep systems patched

❌ DON'T

Use root/default credentials
Store secrets in code
Over-permissive security groups
Disable encryption
Ignore logs and monitoring
Share credentials
Skip compliance requirements
Trust unverified data sources

What ships with it: 6 files

12.0 KB alongside SKILL.md, 1 of them executable