iam

AWS Identity and Access Management for users, roles, policies, and permissions. Use when creating IAM policies, configuring cross-account access, setting up service roles, troubleshooting permission errors, or managing access control.

1.04x

Quality

82%

Does it follow best practices?

Impact

94%

1.04x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Evaluation results

90%

10%

Third-Party Security Audit Access

Cross-account role with External ID

Criteria

Without context

With context

ExternalId present

100%

ExternalId uses StringEquals

100%

Correct principal account

100%

sts:AssumeRole action

100%

Read-only permissions

100%

Scoped resources

No wildcard actions

50%

100%

No-pager CLI flag

100%

Policy Version field

100%

Confused deputy explanation

100%

Roles over keys

100%

92%

Microservices IAM Roles for Order Processing Platform

Least-privilege service roles with permission boundaries

Criteria

Without context

With context

Three separate roles

100%

Lambda service principal

100%

Trust policy conditions

Ingestor SQS scoped

100%

Processor secrets scoped

100%

Report generator S3 scoped

100%

No cross-function access

100%

Permission boundary created

100%

Boundary blocks IAM

100%

No wildcard actions

100%

Lambda logging access

100%

No-pager in script

100%

Policy Version 2012-10-17

100%

Self-Service EC2 Management for Multi-Team Engineering Organization

ABAC tag-based policies with MFA enforcement

Criteria

Without context

With context

ABAC tag matching

100%

No hard-coded instance ARNs

100%

MFA condition for prod

100%

BoolIfExists for MFA

100%

Explicit Deny on key pairs

100%

ec2:Describe always allowed

100%

Tag-based team isolation

100%

Policy Version field

100%

Scalability explanation

100%

Explicit deny rationale

100%

Repository: itsmostafa/aws-agent-skills
Commit: 5df6da7

Evaluated: 29 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Third-Party Security Audit Access Microservices IAM Roles for Order Processing Platform Self-Service EC2 Management for Multi-Team Engineering Organization

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.