Browse Skills

Audits AWS Elastic Beanstalk load balancer listeners to verify HTTPS is enabled for encrypted connections. Use this skill for CIS AWS Compute Benchmark 10.4 compliance checks.

Audits and ensures that AWS Elastic Beanstalk environments have managed platform updates enabled, following CIS AWS Compute benchmark 10.1. Use when securing Beanstalk environments to enable automatic patching during maintenance windows.

Checks that AWS Elastic Beanstalk load balancers have access logs enabled, in accordance with CIS AWS Foundations Benchmark control 10.3. Use for security audits and compliance verification.

Audits and enforces the use of customer-managed KMS keys for AWS Fargate ephemeral storage encryption in ECS, helping meet CIS compliance requirements and enhance data protection.

Audits Lambda functions to ensure database credentials are stored and retrieved from AWS Secrets Manager, helping maintain security and enable automatic rotation.

Audit AWS AMIs to ensure they have been created within the last 90 days, a CIS benchmark compliance check for compute services.

Verifies that AWS EC2 Machine Images (AMIs) are not publicly shared, preventing unauthorized access to instance data and configurations. For use in cloud security audits and CIS Benchmark compliance.

Ensure your AWS Lambda functions don't have administrative permissions. Audit execution roles to enforce least privilege and remove overly permissive policies.

Check AWS Lambda functions for deprecated or soon-to-be-unsupported runtime versions, ensuring compliance with best practices and security standards.

Audits and remediates unencrypted Amazon Machine Images (AMIs) in AWS to ensure EBS snapshots are encrypted, as per CIS AWS Compute Benchmark 2.1.2. Use this skill to maintain encryption compliance for your AWS compute resources.

Audits AWS Lambda functions for unknown cross-account access in resource-based policies, helping enforce CIS benchmark requirements and prevent unauthorized data exposure.

Automatically audits AWS Lambda functions to verify they reference active IAM execution roles, preventing failures from deleted roles. Based on CIS AWS Foundations Benchmark control 12.7.