DevOps

Automate audit and remediation for CIS AWS Compute control 11.1: ensure Fargate ephemeral storage uses customer-managed KMS keys for encryption on ECS.

Audit and enable AWS Config for Lambda and serverless functions to track configuration changes for compliance with CIS AWS Compute 12.1. This skill guides you through checking and deploying conformance packs.

Check AWS Lambda functions to ensure resource-based policies do not allow unknown cross-account access. Use this skill to audit compliance with CIS AWS Foundations Benchmark for compute services.

Audits AWS Lambda functions to verify that runtime environments are not deprecated or end-of-life. Helps ensure security compliance by guiding the upgrade of Lambda runtimes to supported versions.

Audit AWS Lambda functions to verify that environment variables are encrypted in transit, with remediation steps to enable client-side encryption for compliance.

Verifies that CloudWatch Lambda Insights is enabled on AWS Lambda functions for enhanced monitoring and debugging. Useful for security audits and maintaining compliance with CIS benchmarks.

Audit and enforce that AWS Lambda functions use AWS Secrets Manager for database credentials, in line with CIS AWS Foundations Benchmark controls. Includes console-based verification and remediation steps.

Audits AWS Lambda function IAM permissions to ensure least privilege access is configured, reducing security risk by limiting permissions to only necessary resources and operations.

Audit AWS Lambda functions to ensure each has a unique IAM execution role, following the principle of least privilege. Use this skill to enhance security isolation between serverless functions.

Audit AWS Lambda functions for resource-based policies that allow public anonymous access, and remediate by removing or replacing them with trusted principals. Useful for security compliance checks (CIS AWS Compute 12.6).

Audit AWS Lambda functions to ensure they reference active, existing IAM execution roles. Helps maintain compliance with CIS AWS Foundations Benchmark control 12.7 and prevent function execution failures.

Audits AWS Lambda functions to verify code signing configurations, ensuring only trusted code is deployed. Helps meet CIS AWS Compute benchmark requirement 12.8.