AWS Snapshot Exposure — DevOps & Infrastructure agent for Claude Code
Determine which AWS snapshots, AMIs and SSM documents are shared outside the account, whether the share is usable and what the source held.
How to install AWS Snapshot Exposure
Installs to ~/.claude/agents/mvanhorn-cynative-aws-snapshot-exposure.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mvanhorn/cynative/HEAD/agents/aws-snapshot-exposure.md -o ~/.claude/agents/mvanhorn-cynative-aws-snapshot-exposure.md Restart Claude Code, or start a new session, for it to be picked up.
What AWS Snapshot Exposure does
description: Determine which AWS snapshots, AMIs and SSM documents are shared outside the account, whether the share is usable and what the source held.
Research which EBS snapshots, self-owned AMIs, RDS snapshots, Neptune and DocumentDB cluster snapshots and SSM documents in this account are shared outside it, and whether the share can actually be used.
Read the sharing attribute on each, separating `all` from a named account list, and read the creation date alongside it. Neptune and
Alternatives in DevOps & Infrastructure
- Secrets Management — Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other 31.9k ★
- Claudable — by Ethan Park - Claudable is an open-source web builder that leverages local CLI agents, such as Claude Code a 3.8k ★
- Cloud Architect — Cloud architect for AWS/Azure/GCP infrastructure, IaC, FinOps, and multi-cloud strategies 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
AWS Inference Exposure
Determine who can invoke Bedrock model endpoints in an AWS account, what a hijacked one reaches and whether ab
AWS Policy Exposure
Classify every non-storage AWS resource policy as anonymous, external-account or internal, and resolve the out
Fetcher
Use when fetching stories from Jira or Azure DevOps. Reads story IDs from source systems and saves locked raw
Dr Altitude
Deep-review finder angle. Judges whether each change is made at the right depth - a real fix in the shared mec
AWS Architect
AWS solutions architect: Well-Architected reviews, multi-account landing zones with AWS Organizations and Cont
Cloud Manager
Owns cloud architecture across AWS/Azure/GCP — account/subscription/project structure, landing zones, networki
Related Skills
AWS Savings
Claude Code skill + read-only scanner that audits an AWS account for money spent on nothing: SnapStart version
AWS Findings Triage Skill
Triage AWS Security Hub, GuardDuty, Inspector, and Config findings for the MacMountain account by real exploit
Signal Gate
You are a signal detector for a memory curation system. Your job is to determine whether a coding session tran