Cloud Iac Security — Security skill for Claude Code
Cloud and infrastructure-as-code hardening - IAM, network, storage, metadata, drift, posture scanning.
How to install Cloud Iac Security
Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security/SKILL.md
mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/cloud-iac-security.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-cloud-iac-security/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Cloud Iac Security does
name: cloud-iac-security description: Cloud and infrastructure-as-code hardening - IAM, network, storage, metadata, drift, posture scanning. tags: cloud, infra
- Identity first: no root/owner for daily use; MFA (phishing-resistant) on all humans; SSO; workload identity instead of static keys; least-privilege roles; no
*:*; permission boundaries/SCPs; break-glass accounts monitored. - Network: default-deny security groups; private subnets for data stores; no public SSH/RDP/DB ports; egr
Alternatives in Security
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Review Iac Consistency
Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, a
Cloud Config Audit
Assess infrastructure-as-code security with offline scanning and evidence-based finding review.
Mobile Security
iOS/Android app hardening - storage, transport, auth, binary protection (OWASP MASVS).
Devsecops
Audit pipelines, IaC, or cloud config for security risk via guided intake - domain, stack, config context, fra
Audit Cloud
Authenticated AWS cloud-configuration audit for a contracted engagement. Confirms identity + read-only role, r
Claude Code Dev Agents
A comprehensive collection of specialized Claude Code subagents for software development lifecycle. Domain-agn
Related Agents
Appsec Iac Reviewer
Use proactively for Infrastructure as Code security reviews: Terraform, CloudFormation, Pulumi, Kubernetes, He
Ehs Infra Cloud
Infrastructure and cloud security specialist for the Ethical Hacker Squad. Reviews Terraform and other IaC, Do
Cloud Engineer
Designs and implements cloud infrastructure using Infrastructure as Code (Terraform, CDK). Manages VPC, IAM, d