securing-s3-buckets

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user wants to secure a new bucket, audit an existing bucket, fix a security finding, configure encryption, or enable logging and monitoring. Do NOT use for general S3 data operations, S3 Tables setup, or discovering existing data assets.

Quality

92%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Quality

Content

92%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, highly actionable skill body with clear sequenced workflows, robust validation checkpoints for destructive operations, and proper progressive disclosure into real reference files. The only minor weakness is slight verbosity in a couple of inline examples and emphatic restatements.

Dimension	Reasoning	Score
Conciseness	Generally lean using MUST/SHOULD/MAY constraints and deferring full CLI sequences to references, but the inline DenyInsecureTransport policy JSON and repeated 'REQUIRED, not optional' emphases could be trimmed.	4 / 5
Actionability	Provides copy-paste-ready commands with specific required flags, a complete bucket-policy JSON example, and concrete validation commands (python3 -m json.tool, aws iam simulate-principal-policy) covering the common cases.	5 / 5
Workflow Clarity	Workflow A is an explicitly ordered, do-not-skip sequence with validation checkpoints (confirm each step, re-run audit after fix, validate merged JSON, simulate permissions before writes) and a troubleshooting section for error recovery.	5 / 5
Progressive Disclosure	SKILL.md is a clear overview pointing to one-level-deep references (workflows, audit-checklist, encryption, remediation, iam-permissions), all of which exist, with an Additional Resources section for easy navigation.	5 / 5
	Total	19 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly states capabilities, provides multiple natural trigger phrases, and includes explicit positive and negative boundary guidance. The only minor gap is the absence of synonym variations in trigger terms.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions — access control, encryption, monitoring, remediation, plus five enumerated workflows — giving comprehensive coverage of the domain rather than vague abstraction.	5 / 5
Completeness	Explicitly answers both what ('Create and secure S3 buckets following AWS best practices...') and when ('Use when the user wants to...') with concrete triggers, plus a negative boundary clause.	5 / 5
Trigger Term Quality	Includes natural trigger phrases ('secure a new bucket', 'audit an existing bucket', 'fix a security finding') users would actually say, but lacks synonym variations such as 'harden' or 'lock down'.	4 / 5
Distinctiveness Conflict Risk	Occupies a clear S3-security niche with distinct triggers and an explicit 'Do NOT use for...' boundary that minimizes overlap with general S3 skills.	5 / 5
	Total	19 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: aws/agent-toolkit-for-aws
Path: skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md
Commit: d6ad2e4

Reviewed: about 2 hours ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.