🔒
DevOpsTypeScript

CIS AWS Compute 12.6

by CyberStrikeus

CIS AWS Compute 12.6 is a DevOps skill for Claude Code, published by CyberStrikeus in CyberStrike.

1.7K stars253 forkson CyberStrikeus/CyberStrikeAdded 2026/07/20+4% in starsRepository updated 2026/08/05
View source on GitHubDownload repo ZIP
aiai-agentai-securitybug-bountycybersecuritydevsecopsethical-hackinghackinghacking-toolllmmcpmcp-servermitre-attackoffensive-securityowasppenetration-testingpentestred-teamsecuritysecurity-tools
Install in seconds
Install CIS AWS Compute 12.6
Copy CIS AWS Compute 12.6 into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/CyberStrikeus/CyberStrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_Compute_Services_Benchmark_v1.1.0/cis-aws-compute-12.6 ~/.claude/skills/cis-aws-compute-12.6

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/CyberStrikeus/CyberStrike.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/AWS/CIS_AWS_Compute_Services_Benchmark_v1.1.0/cis-aws-compute-12.6/SKILL.md in CyberStrikeus/CyberStrike
Installs to
~/.claude/skills/cis-aws-compute-12.6
Collection
One of 51 skills cataloged from this repository
Category
DevOps — 1075 skills

What CIS AWS Compute 12.6 does

Audit and remediate AWS Lambda functions to ensure they are not exposed to the public. Helps enforce CIS AWS Compute benchmark 12.6 by removing resource-based policies that allow anonymous invocation.

CIS AWS Compute 12.6 is cataloged under DevOps on DirSkills. CIS AWS Compute 12.6 comes from a repository tagged ai, ai-agent, ai-security, bug-bounty and cybersecurity.

Documentation

README

Ensure Lambda functions are not exposed to everyone

Description

A publicly accessible Amazon Lambda function is open to the public and can be reviewed by anyone. To protect against unauthorized users that are sending requests to invoke these functions they need to be changed so they are not exposed to the public.

Rationale

Allowing anyone to invoke and run your Amazon Lambda functions can lead to data exposure, data loss, and unexpected charges on your AWS bill.

Impact

Restricting public access may break existing integrations that rely on anonymous invocation of Lambda functions.

Audit Procedure

Using AWS Console

This is the opening of the README. Read the full README on GitHub.

Frequently asked about CIS AWS Compute 12.6

  • What else does CyberStrikeus publish alongside CIS AWS Compute 12.6?

    CIS AWS Compute 12.6 is one of 51 skills that DirSkills catalogs from CyberStrikeus/CyberStrike, the repository it ships in. Its siblings there include AMI Age Compliance, AMI Encryption Check and AMI Naming Convention Compliance. Each one is a separate skill with its own page in this directory, installs the same way CIS AWS Compute 12.6 does, and is maintained by CyberStrikeus in that same repository. The rest of the collection is listed on the CyberStrikeus/CyberStrike page.

  • How does CIS AWS Compute 12.6 compare to other DevOps skills?

    CIS AWS Compute 12.6 ranks #317 by stars among the 1075 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CIS AWS Compute 12.6 against them. Open each page to compare what they document and how they install.

More from CyberStrikeus/CyberStrike

CIS AWS Compute 12.6 is one of 51 skills cataloged on DirSkills from CyberStrikeus/CyberStrike.

See all 51 skills →
📅
2026/07/20

AMI Age Compliance

Audit AWS AMIs to ensure they have been created within the last 90 days, a CIS benchmark compliance check for compute services.
DevOps
1.7K253
🔒
2026/07/20

AMI Encryption Check

Audits and remediates unencrypted Amazon Machine Images (AMIs) in AWS to ensure EBS snapshots are encrypted, as per CIS AWS Compute Benchmark 2.1.2. Use this skill to maintain encryption compliance for your AWS compute resources.
DevOps
1.7K253
🏷️
2026/07/20

AMI Naming Convention Compliance

Checks that all Amazon Machine Images (AMIs) in your AWS account follow your organization's naming convention, helping maintain a consistent asset inventory.
DevOps
1.7K253
🛡️
2026/07/20

AWS Approved AMI Audit

Audits Amazon EC2 instances to confirm only organization-approved AMIs are used, providing manual verification and remediation steps. Enforces consistent, secure machine images across AWS environments.
DevOps
1.7K253
🛡️
2026/07/20

AWS Lambda Admin Privileges Audit

Ensure your AWS Lambda functions don't have administrative permissions. Audit execution roles to enforce least privilege and remove overly permissive policies.
DevOps
1.7K253
🔒
2026/07/20

AWS Lambda Code Signing Compliance

Audit and enforce AWS Lambda code signing configurations to prevent deployment of unverified or tampered code. Use for security compliance and integrity verification in serverless applications.
DevOps
1.7K253

More DevOps skills

CIS AWS Compute 12.6 is one of 1075 DevOps skills cataloged on DirSkills, ranked #317 by stars among them.

Browse all DevOps skills →
⚙️
4w ago

Backend Patterns

Backend Patterns covers backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes. Use when building or reviewing Node.js, Express, or Next.js API routes and their data access.
DevOps
239.8K36.4K
🔌
4w ago

API Connector Builder

API Connector Builder builds a new API connector or provider by matching an existing integration pattern in the codebase exactly. Use it when adding a new integration to a project without introducing a second architecture.
DevOps
239.8K36.4K
🔄
4w ago

Migration

Migration implements reversible compatibility-safe transitions for schema, data, API, protocol, configuration, or dependency changes. Use it when rollback and preservation proof are required.
DevOps
97.8K5.6K