Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Scans AWS accounts for security misconfigurations across S3, IAM, EC2, RDS, and CloudTrail using AWS CLI commands. Surfaces issues like public buckets, IAM users without MFA, open security groups, and unencrypted storage. Maps findings to CIS AWS Foundations Benchmark controls.
Runs directly against AWS CLI without requiring third-party security tools or managed services.
When to use it
- Finding publicly accessible S3 buckets before a compliance audit
- Identifying IAM users without MFA enabled
- Checking security groups with SSH or RDP open to the internet
- Auditing RDS instances for public accessibility and missing encryption
- Verifying CloudTrail is active and log validation is enabled across regions
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Check my AWS account for critical security issues
- 1Lists all S3 buckets and checks ACLs, bucket policies, and public access block settings
- 2Generates an IAM credential report and identifies users missing MFA
- 3Queries EC2 security groups for rules permitting 0.0.0.0/0 on ports 22 and 3389
- 4Checks RDS instances for public accessibility and disabled storage encryption
- 5Outputs a severity-labeled markdown report organized by service
Markdown security audit report listing critical, high, and medium severity findings across S3, IAM, EC2, and RDS
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.