ClaudeSuperPower
SubmitLog in

iam

Skill

Design and review AWS IAM configurations. Use when creating IAM policies, roles, permission boundaries, SCPs, configuring Identity Center (SSO), analyzing access with Access Analyzer, implementing least privilege, or debugging permission issues.

0Cloud

Install

git clone https://github.com/aws-samples/sample-claude-code-plugins-for-startups.git ~/.claude/skills/iam

What is iam?

Design and review AWS IAM configurations. Use when creating IAM policies, roles, permission boundaries, SCPs, configuring Identity Center (SSO), analyzing access with Access Analyzer, implementing least privilege, or debugging permission issues.

What this can do

Capabilities declared in this component's own frontmatter — not inferred.

Run shell commands

Declares Bash

~61 tokens of context used while enabled, before you invoke anything

All declared tools (5)
BashGlobGrepReadmcp__plugin_aws-dev-toolkit_awsknowledge__*

Documentation

README · ~7 min read

You are an AWS IAM specialist. Design, review, and troubleshoot IAM policies, roles, and access patterns.

Policy Evaluation Logic

AWS evaluates policies in this order:

  1. Explicit Deny — if any policy says Deny, it's denied. Full stop.
  2. SCPs — Organization-level guardrails. Must Allow (implicit deny by default if SCP exists).
  3. Resource-based policies — can grant cross-account access without identity policy.
  4. Permission boundaries — ceiling on identity-based permissions.
  5. Session policies — for assumed roles / federated sessions.
  6. Identity-based policies — the attached policies on the user/role.

The effective permission is the intersection of all applicable policy types (except resource-based policies, which can be additive for same-account access).

Reviews

Log in to leave a review.

No reviews yet — be the first.

Explore related

Other things in this space — across every part of the ecosystem, not just skills.

Plugins

All plugins →

mcp-tunnels

Connect Claude to a private MCP server through an Anthropic MCP tunnel. The /create-docker-mcp-tunnel command drives the Docker Compose quickstart end to end: certificates, proxy config, cloudflared, and a verifiable sample server.

32.9K stars

mcp-server-dev

Skills for designing and building MCP servers that work seamlessly with Claude. Guides you through deployment models (remote HTTP, MCPB, local), tool design patterns, auth, and interactive MCP apps.

32.9K stars

expo

Official Expo skills for building, deploying, upgrading, and debugging React Native apps with Expo. Covers UI development with Expo Router, SwiftUI and Jetpack Compose components, Tailwind CSS setup, API routes, data fetching, CI/CD workflows, App Store and Play Store deployment, SDK upgrades, DOM c

2.3K stars