aws-security
AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN segmentation and DNS Firewall security-control suitability, certificate renewal ownership and monitoring, incident response triage ownership, centralized security log store (CloudWatch or Security Lake). Also factual configuration, findings, data sources and severity scoring for GuardDuty, Inspector, Security Hub V2/OCSF (Exposure, connectors, automation), Security Hub CSPM/ASFF (standards, controls), Macie, Detective, Security Lake, AWS Security Incident Response membership and case coverage, and Organizations security policies. Applies to advisory security-service choices even when one service is named. Implementation, rule or code authoring, deployment, scans and troubleshooting outside these factual procedures belong to specialist skills. Supports local AWS CLI and AWS MCP.
- Version
- 2
Pinned to revision a2c98f2037dc, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/aws-security/SKILL.md
- skills/aws-security/references/detective-configuration.md
- skills/aws-security/references/detective-investigations.md
- skills/aws-security/references/detective.md
- skills/aws-security/references/guardduty-configuration.md
- skills/aws-security/references/guardduty-findings.md
- skills/aws-security/references/guardduty.md
- skills/aws-security/references/inspector-configuration.md
- skills/aws-security/references/inspector-findings.md
- skills/aws-security/references/inspector.md
- skills/aws-security/references/macie-configuration.md
- skills/aws-security/references/macie-findings.md
- skills/aws-security/references/macie.md
- skills/aws-security/references/organization-policies.md
- skills/aws-security/references/security-hub-configuration.md
- skills/aws-security/references/security-hub-cspm-configuration.md
- skills/aws-security/references/security-hub-cspm-findings.md
- skills/aws-security/references/security-hub-cspm.md
- skills/aws-security/references/security-hub-findings.md
- skills/aws-security/references/security-hub.md
- skills/aws-security/references/security-lake-configuration.md
- skills/aws-security/references/security-lake-sources.md
- skills/aws-security/references/security-lake.md
- skills/aws-security/references/service-recommendations.md
- skills/aws-security/references/service-recommendations/application-security.md
- skills/aws-security/references/service-recommendations/certificates.md
- skills/aws-security/references/service-recommendations/data-discovery.md
- skills/aws-security/references/service-recommendations/detection-and-vulnerability.md
- skills/aws-security/references/service-recommendations/enablement-checks.md
- skills/aws-security/references/service-recommendations/iam-permissions.md
- skills/aws-security/references/service-recommendations/inventory-commands.md
- skills/aws-security/references/service-recommendations/network-firewall.md
- skills/aws-security/references/service-recommendations/network-protection.md
- skills/aws-security/references/service-recommendations/posture-and-investigation.md
- skills/aws-security/references/service-recommendations/recommendation-matrix.md
- skills/aws-security/references/service-recommendations/web-protection.md
- skills/aws-security/references/services-overview.md
Every link opens the file at its source, pinned to the revision this page describes.