Skip to content

IAM & Least Privilege Skills

Curated agent skills for designing zero-trust identity architectures, role definitions, and access perimeter enforcement.

Target Skill Areas

  • iam-policy-synthesizer: Transforming broad wildcard permissions (*:*) into scoped, action-specific IAM policies.
  • workload-identity-federation: Replacing static cloud credentials with short-lived tokens via GitHub Actions, GKE, or EKS.
  • service-control-policies: Enterprise guardrail SCPs preventing disabling CloudTrail, public S3 buckets, or unauthorized regions.