cloud-security

原文涵盖的主题

• Cloud Security
• Table of Contents
• Overview
• What This Skill Does
• Distinction from Other Security Skills
• Prerequisites
• Cloud Posture Check Tool
• Exit Codes

Cloud security posture assessment skill for detecting IAM privilege escalation, public storage exposure, network configuration risks, and infrastructure-as-code misconfigurations. This is NOT incident response for active cloud compromise (see incident-response) or application vulnerability scanning (see security-pen-testing) — this is about systematic cloud configuration analysis to prevent exploitation. -- Overview Cloud Posture Check Tool IAM Policy Analysis S3 Exposure Assessment Security Group Analysis IaC Security Review Cloud Provider Coverage Matrix Workflows Anti-Patterns Cross-References -- This skill provides the methodology and tooling for cloud security posture management (CSPM) — systematically checking cloud configurations for misconfigurations that create exploitable attack surface. It covers IAM privilege escalation paths, storage public exposure, network over-permissioning, and infrastructure code security. | Skill | Focus | Approach | |-------|-------|----------| | cloud-security (this) | Cloud configuration risk | Preventive — assess before exploitation | | incident-response | Active cloud incidents | Reactive — triage confirmed cloud compromise | | threat-detect

这里只展示节选，请以完整原文和当前要求为准。