AWS Transport Encryption — DevOps & Infrastructure agent for Claude Code
Report AWS services carrying traffic without TLS against the CIDRs admitted to their ports, together with the certificates behind them.
How to install AWS Transport Encryption
Installs to ~/.claude/agents/mvanhorn-cynative-aws-transport-encryption.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mvanhorn/cynative/HEAD/agents/aws-transport-encryption.md -o ~/.claude/agents/mvanhorn-cynative-aws-transport-encryption.md Restart Claude Code, or start a new session, for it to be picked up.
What AWS Transport Encryption does
description: Report AWS services carrying traffic without TLS against the CIDRs admitted to their ports, together with the certificates behind them.
Research which RDS instances and clusters, DMS endpoints, MSK clusters and connectors, Redshift clusters, OpenSearch domains, Transfer Family servers and SNS subscriptions in this account carry traffic without TLS, and what shares the network path to each. Whether these endpoints answer from public DNS at all is outside this agent's scope.
Alternatives in DevOps & Infrastructure
- Secrets Management — Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other 31.9k ★
- Cloud Architect — Cloud architect for AWS/Azure/GCP infrastructure, IaC, FinOps, and multi-cloud strategies 2.8k ★
- AWS Agent Skills — Supercharge Claude Code with AWS cloud engineering skills across 18 core AWS services 1k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
AWS Data Encryption
Determine which unencrypted AWS data can leave the service boundary, and where a KMS key policy is no narrower
AWS Perimeter Bypass
Find AWS Network Firewall and WAF deployments that pass traffic without inspecting it, and the subnets whose r
Azure Publisher
Publishes or redeploys a static folder (report, design room, prototype) to Azure Static Web Apps behind SSO us
Infra Checker
Agent-agnostic infrastructure health checker. Performs read-only validation of services, endpoints, certificat
Upstream Watcher
Cross-references new Anthropic upstream changes against the current project's scaffolded infrastructure and pr
AWS Log Reader
Use this agent when you need to analyze, summarize, or extract information from AWS logs (CloudWatch, S3 acces
Related Skills
Kubeshark
Cluster-wide network observability for Kubernetes. Captures L4 packets, L7 API calls, and decrypted TLS traffi
Servicebar
macOS menu bar app for monitoring services, ports, Docker containers and MCP servers. Scan processes, manage s
AWS Skills Pack
AWS cloud services skills