Skip to content
Kitbay
Submit

aws-security

Apache-2.0Updated on Nov 11, 20263,464GitHub stars

An AWS skill for reviewing which AWS security services fit a workload and how well they cover it.

What the skill teaches

An AWS skill for reviewing which AWS security services fit a workload and how well they cover it. It explains and assesses GuardDuty, Inspector, Security Hub, Macie, Detective and Security Lake, plus WAF, Network Firewall, VPC endpoints, DNS Firewall, certificate renewal and organisation policies, and can produce prioritised recommendations backed by evidence it has checked. The rules restrict it to read-only API calls, put GuardDuty attack sequences and Security Hub exposure findings first, avoid listing every member account unless asked, and keep secrets out of answers. It works with the AWS CLI or the AWS MCP Server.

Capabilities

  • Summarise GuardDuty, Inspector and Security Hub findings
  • Assess coverage of AWS security services across accounts
  • Recommend security services with cost and priority
  • Review WAF, Network Firewall and VPC endpoint suitability