🔐 Cybersecurity · Cloud Hardening

Right-size IAM to least privilege

Start scoped-down, expand only with evidence from real denied actions.

advanced~45 minSecurity EngineersAppSecDevSecOps

Steps

1Inventory every identity: humans, services, CI roles, third parties
2Replace wildcards with explicit actions gathered from access logs
3Separate duties: deploy role cannot read databases
4MFA enforced for console humans; no long-lived access keys
5Set permission boundaries so escalation paths are capped
6Quarterly access reviews with auto-expiring grants

Common Pitfalls

▲Admin roles 'temporarily' granted during setup, forever
▲CI pipelines holding prod-write credentials

Commands

Install with skills CLI

$ npx skills add aniruddhaadak80/skills --skill cloud-hardening-iam-least-privilege

Install globally

$ npx skills add aniruddhaadak80/skills --skill cloud-hardening-iam-least-privilege -g

Tags

#iam#cloud#zero-trust#cybersecurity#cloud-hardening

Install this skill

$ npx skills add aniruddhaadak80/skills --skill cloud-hardening-iam-least-privilege -a opencode

SKILL.md

# Right-size IAM to least privilege

> Start scoped-down, expand only with evidence from real denied actions.

## When to Use This Skill

Start scoped-down, expand only with evidence from real denied actions.

## Steps

1. Inventory every identity: humans, services, CI roles, third parties
2. Replace wildcards with explicit actions gathered from access logs
3. Separate duties: deploy role cannot read databases
4. MFA enforced for console humans; no long-lived access keys
5. Set permission boundaries so escalation paths are capped
6. Quarterly access reviews with auto-expiring grants

## Common Pitfalls

- Admin roles 'temporarily' granted during setup, forever
- CI pipelines holding prod-write credentials

View source on GitHub ↗

Triage vulnerabilities by exploitability and ship patches within defined SLAs.

🔐 Cybersecurity·~30m

Open →

Right-size IAM to least privilege

Steps

Common Pitfalls

Commands

Tags

Related skills