aws-security
An AWS skill for reviewing which AWS security services fit a workload and how well they cover it.
What the skill teaches
An AWS skill for reviewing which AWS security services fit a workload and how well they cover it. It explains and assesses GuardDuty, Inspector, Security Hub, Macie, Detective and Security Lake, plus WAF, Network Firewall, VPC endpoints, DNS Firewall, certificate renewal and organisation policies, and can produce prioritised recommendations backed by evidence it has checked. The rules restrict it to read-only API calls, put GuardDuty attack sequences and Security Hub exposure findings first, avoid listing every member account unless asked, and keep secrets out of answers. It works with the AWS CLI or the AWS MCP Server.
Capabilities
- Summarise GuardDuty, Inspector and Security Hub findings
- Assess coverage of AWS security services across accounts
- Recommend security services with cost and priority
- Review WAF, Network Firewall and VPC endpoint suitability
About
- Publisher
- Amazon Web Services
Works with
Install
- Run this to add it to Claude Code:
/plugin install aws-core@claude-plugins-official
What's inside
- references/detective-configuration.md
- references/detective-investigations.md
- references/detective.md
- references/guardduty-configuration.md
- references/guardduty-findings.md
- references/guardduty.md
- references/inspector-configuration.md
- references/inspector-findings.md
- references/inspector.md
- references/macie-configuration.md
- references/macie-findings.md
- references/macie.md
- references/organization-policies.md
- references/security-hub-configuration.md
- references/security-hub-cspm-configuration.md
- references/security-hub-cspm-findings.md
- references/security-hub-cspm.md
- references/security-hub-findings.md
- references/security-hub.md
- references/security-lake-configuration.md
- references/security-lake-sources.md
- references/security-lake.md
- references/service-recommendations.md
- references/service-recommendations/application-security.md
- references/service-recommendations/certificates.md
MCP servers and skills can run code on your computer and act on your data. Review the source before installing.
Details
| Fact | Value | Source |
|---|---|---|
| Type | Skill | |
| Tool | Amazon Web Services | |
| Publisher | Amazon Web Services | source |
| Official status | Officialpublished in AWS's own GitHub organisation (aws); the README links to the AWS user guide on docs.aws.amazon.com | source |
| Needs an API key or sign-in | Not stated in its documentation | |
| Includes scripts | No | source |
| Platforms | Not stated in its documentation | |
| AI clients | Claude Code, Cursor, Codex | source |
| Licence | Apache-2.0 | source |
| Pricing | Not stated in its documentation | |
| Activity | Last commit Nov 11, 20263,464 GitHub starsDownload data not available (not on npm or PyPI) | source |
| Links | Repository |
More from Amazon Web Services
4 servers · 169 skills
- analyzing-release-readiness (Skill)
- Amazon ECS MCP Server (MCP server)
- Agent Toolkit for AWS (MCP server)
- chatting-with-aws-devops-agent (Skill)
- coordinating-multi-space-devops-agent (Skill)
- diff-scanning-with-aws-security-agent (Skill)
Sources
- GitHub repositorygithub.com/aws/agent-toolkit-for-aws · Backs: AI clients, Official status, Publisher, Activity, LicenceNov 11, 2026
- Skill file (SKILL.md)github.com/aws/agent-toolkit-for-awsNov 10, 2026
- Licence file (LICENSE)github.com/aws/agent-toolkit-for-aws · Backs: LicenceNov 12, 2026
- Folder in the repository (aws-security)github.com/aws/agent-toolkit-for-aws · Backs: Includes scriptsNov 10, 2026
Other MCP servers and skills for Amazon Web Services
- AWS Documentation MCP Server(MCP server)
- awslabs.amazon-mq-mcp-server(MCP server)
- awslabs.amazon-sns-sqs-mcp-server(MCP server)
- awslabs.amazon-translate-mcp-server(MCP server)
- awslabs.aws-iac-mcp-server(MCP server)
- awslabs.aws-location-mcp-server(MCP server)
- awslabs.aws-pricing-mcp-server(MCP server)
- analyzing-release-readiness(Skill)
- View all →