Skill Claude CodeCodex
Ensure IAM policies that allow full ":" administrative privileges are not attached.
47 tagged iam, measured the same way as everything else here.
Browse within: aws 38cis 28ai-hacking 26cis-iam 26ai-penetration-testing 25ai-pentesting 22ai-security 12least-privilege 8cloud-security 7organizations 7identity 6keycloak 5privilege-escalation 5
Skill Claude CodeCodex
Ensure IAM policies that allow full ":" administrative privileges are not attached.
Skill Claude CodeCodex
Ensure AWS resource policies do not allow unrestricted access using "Principal": "".
bregman-arie/devops-sre-skills
Skill Claude CodeCodex
Identify why an AWS API call is denied and what policy element blocks it.
Skill Claude CodeCodex
Interview a person who wants to start or advance an Identity and Access Management career, then create a short and evidence-based career plan with a downloadable Markdown document when file tools are available. Use when the user wants help selecting an IAM role, researching IAM opportunities or target employers…
Skill Claude CodeCodex
Review and design access control for web applications and APIs, and teach the IAM concepts behind the decisions. Use when asked to find IDOR or BOLA, broken function-level authorization, privilege escalation, organization-isolation failures, unsafe roles or permissions, stale access, or service and AI-agent access.…
Skill Claude CodeCodex
Maintain and extend the dockndevai MCP server suite (mcp-keycloak, mcp-kubernetes, mcp-oci, mcp-kafka, mcp-clickhouse, mcp-debezium, mcp-azure, mcp-azure-devops, mcp-percona-pg). Use when adding or changing a tool, touching the security/policy layer, bumping dependencies, cutting a release, or publishing to npm or an…
Skill Claude CodeCodex
Triage a live authentication incident on a Skycloak-managed Keycloak cluster, separating platform outages from attacks and from configuration changes, using events, WAF logs and cluster health. Read-only. Use when users cannot log in, login failures spike, or SSO suddenly breaks.
Skill Claude CodeCodex
Wire an enterprise identity provider (Entra ID, Okta, Google, or any OIDC issuer) into a Keycloak realm end to end, including the upstream app registration, broker configuration, connection testing, and verification against real login events. Use when asked to set up SSO, connect an IdP, or onboard a customer's…
Skill Claude CodeCodex
Preflight a Keycloak export, import or migration on a Skycloak-managed cluster against the known blockers, and diagnose a job that already failed by reading the failure reason the API records but the dashboard notice does not show. Use when an export or import fails, a migration stalls, or before moving realm data in…