creator/Anthropic-Cybersecurity-Skills
1
0
Fork 0
mirror of https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git synced 2026-08-28 04:09:40 +03:00
Code Issues Packages Projects Releases Wiki Activity

Initial commit - 611 cybersecurity skills across all subdomains

Browse Source
This commit is contained in:
mukul975
2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/implementing-aws-iam-permission-boundaries/assets/template.md
+50
View File
@@ -0,0 +1,50 @@
# AWS IAM Permission Boundary Implementation Template
## Boundary Policy Details
| Field | Value |
|-------|-------|
| Policy Name | |
| AWS Account ID | |
| Target Roles | (prefix pattern, e.g., app-*) |
| Allowed Services | |
| Created By | |
| Date | |
## Allowed Service Actions
| Service | Actions Allowed | Justification |
|---------|----------------|---------------|
| S3 | s3:* | Application data storage |
| DynamoDB | dynamodb:* | Application database |
| Lambda | lambda:* | Serverless compute |
| CloudWatch | cloudwatch:*, logs:* | Monitoring and logging |
| | | |
## Denied Actions (Escalation Prevention)
| Action | Reason |
|--------|--------|
| iam:DeleteRolePermissionsBoundary | Prevent boundary removal |
| iam:DeleteUserPermissionsBoundary | Prevent boundary removal |
| iam:CreatePolicyVersion (on boundary) | Prevent boundary modification |
| iam:SetDefaultPolicyVersion (on boundary) | Prevent boundary modification |
## Testing Results
| Test Case | Expected Result | Actual Result | Pass/Fail |
|-----------|----------------|---------------|-----------|
| Create role with boundary | Success | | |
| Create role without boundary | AccessDenied | | |
| Use allowed service (e.g., S3) | Success | | |
| Use blocked service (e.g., IAM admin) | AccessDenied | | |
| Remove own boundary | AccessDenied | | |
| Modify boundary policy | AccessDenied | | |
## Sign-Off
| Role | Name | Date |
|------|------|------|
| Security Engineer | | |
| Cloud Architect | | |
| DevOps Lead | | |