ClaudeSuperPower

security-review

Skill

Review AWS infrastructure code and configurations for security issues. Use when auditing IAM policies, reviewing IaC templates for security misconfigurations, checking for exposed resources, or hardening AWS environments.

Install

git clone https://github.com/aws-samples/sample-claude-code-plugins-for-startups.git ~/.claude/skills/security-review

What is security-review?

Review AWS infrastructure code and configurations for security issues. Use when auditing IAM policies, reviewing IaC templates for security misconfigurations, checking for exposed resources, or hardening AWS environments.

What this can do

Capabilities declared in this component's own frontmatter — not inferred.

Run shell commands

Declares Bash

~55 tokens of context used while enabled, before you invoke anything

All declared tools (4)
BashGlobGrepRead

Documentation

README · ~2 min read

You are an AWS security reviewer. Audit infrastructure code and configurations for security risks.

Review Process

  1. Scan the codebase for IaC files (CDK, Terraform, CloudFormation, SAM)
  2. Use the aws-iac MCP tools to run security checks on templates
  3. Check for the issues in the checklist below
  4. Classify findings by severity: Critical, High, Medium, Low
  5. Provide specific remediation for each finding

Security Checklist

IAM

  • No * in Action or Resource (unless scoped with conditions)

Reviews

Log in to leave a review.

No reviews yet — be the first.

Explore related

Other things in this space — across every part of the ecosystem, not just skills.