Cloud Security Audit & Hardening Assistant
Audit cloud infrastructure for security gaps and compliance risks
What You Can Do
You can systematically audit cloud infrastructure against industry frameworks like CIS Benchmarks, NIST, and PCI-DSS to identify security gaps and misconfigurations. Claude generates prioritized remediation plans ranked by risk level, along with policy-as-code templates (Terraform, CloudFormation) you can implement immediately. You'll also receive compliance mapping documentation and evidence artifacts suitable for auditors.
Features
Evaluate infrastructure against CIS Benchmarks, NIST CSF, PCI-DSS, HIPAA, and custom baselines
Identify IAM overreach, exposed secrets, unencrypted storage, and network exposure across cloud services
Prioritize findings by severity and business impact with implementation timelines and effort estimates
Export remediation steps as Terraform, CloudFormation, or CDK code ready for CI/CD pipelines
Generate audit reports with sample logs, screenshots, and attestations for regulatory compliance
Define and enforce organization-specific security policies beyond industry standards
Model security posture improvements and cost implications of changes
Audit AWS, Azure, and GCP simultaneously with framework-agnostic recommendations
Example Output
Assessment Report
Critical Findings: 3
- RDS instances lack encryption at rest
- S3 bucket policies allow public read access
- IAM users have overly permissive attach-policy permissions
High-Risk Findings: 8
- CloudTrail not enabled in all regions
- VPC Flow Logs disabled on production subnets
Remediation Plan
Week 1 — Immediate Actions:
- ✓ Enable RDS encryption via KMS (zero-downtime snapshot method)
- ✓ Restrict S3 bucket ACLs to private with bucket policy validation
- ✓ Apply least-privilege IAM roles using policy simulator
Terraform Code (Ready to Deploy)
resource "aws_rds_cluster" "hardened" {
storage_encrypted = true
kms_key_id = aws_kms_key.rds.arn
}
resource "aws_s3_bucket_acl" "restricted" {
bucket = aws_s3_bucket.data.id
acl = "private"
}
What's Included
- SKILL.md: Complete audit and hardening workflow with decision trees for AWS, Azure, and GCP
- Assessment templates: Security checklists aligned with CIS, NIST, and PCI-DSS for each cloud platform
- Remediation workflow: Step-by-step playbooks organized by finding category and severity level
- Compliance mapping reference: Cross-reference how your infrastructure aligns with regulatory frameworks
- Policy-as-code templates: Production-ready Terraform, CloudFormation, and Bicep examples for common remediations
- Custom baseline templates: YAML/JSON schemas for defining organization-specific security standards
- Audit report generator: Template for compliance documentation with executive summary and detailed findings
- Evidence collection checklist: Sample logs, configuration exports, and attestation templates for auditors
Who It's For
- Cloud security architects — Design and validate secure cloud platforms aligned with organizational standards
- DevOps engineers — Harden infrastructure and integrate security controls into CI/CD pipelines
- Compliance officers — Prepare for audits and demonstrate regulatory alignment with SOC 2, ISO 27001, and HIPAA
- IT audit teams — Conduct systematic security assessments and compliance reviews across cloud environments
- Security consultants — Deliver comprehensive hardening recommendations and audit reports to clients
Best For
- Pre-migration cloud security reviews — Audit architecture before moving workloads to the cloud
- Compliance gap analysis — Identify what's missing for SOC 2, ISO 27001, or HIPAA certification
- Quarterly security hardening cycles — Stay aligned with evolving threat landscape and best practices
- Post-incident remediation planning — Prioritize fixes after a security event or penetration test findings
- Third-party vendor security assessments — Evaluate cloud infrastructure your organization depends on
You might also like
Analyze Solidity and other smart contract code for security vulnerabilities, gas inefficiencies, and best practice violations. Get detailed reports with risk scoring, remediation suggestions, and optimization recommendations. Whether you're auditing before deployment or reviewing third-party contracts, this skill identifies critical issues faster than manual review.
You can systematically diagnose database performance bottlenecks by sharing your schema, slow query logs, and execution plans with Claude. It identifies root causes—missing indexes, inefficient joins, lock contention—and provides prioritized recommendations with ready-to-implement SQL. Skip the manual log analysis and get tuning strategies tailored to your workload.
This skill provides a structured approach to analyzing process problems, identifying root causes, and recommending capacity optimizations. You'll get clear bottleneck identification, data-driven recommendations, and a framework to validate whether your solutions actually work. Perfect for diagnosing why workflows are slow and finding the leverage points that matter most.
Use Claude to systematically analyze your database queries, execution plans, and schema to identify performance bottlenecks. The skill generates actionable optimization recommendations with SQL rewrites, index strategies, and configuration tuning. You'll receive detailed before-and-after performance analysis to validate improvements and prioritize work by impact.
You'll design and implement mobile features with architectural rigor, cross-platform considerations, and edge-case handling built-in. This skill generates complete system designs, platform-specific implementation strategies, performance optimization approaches, and testing frameworks. The output is production-ready guidance spanning iOS and Android with security, offline resilience, and deployment strategies included.
Design and optimize injectable formulations by analyzing your active pharmaceutical ingredient (API), selecting compatible excipients, and predicting stability outcomes. You'll receive systematic workflows that guide you through API characterization, formulation architecture, and risk mitigation—enabling faster development cycles and regulatory-ready documentation.
Claude analyzes your code diffs and generates standardized commit messages that follow the Conventional Commits specification. The skill automatically determines the correct commit type, scope, and description based on the changes you've made, ensuring your messages are parseable by automation tools while remaining human-readable for code reviewers.
You can architect multi-node ROS control systems from scratch, including node design patterns, communication flows, and real-time constraints. You'll debug complex node interactions using publisher/subscriber analysis, service call tracing, and action server diagnostics. You can optimize motion controllers through PID tuning, trajectory planning validation, and performance profiling to achieve precise, responsive robotic behavior.