Aws Penetration Testing
Helps with AWS, testing as part of deploying and managing cloud infrastructure workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add hainamchung-aws-penetration-testing npx -- -y @trustedskills/hainamchung-aws-penetration-testing
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"hainamchung-aws-penetration-testing": {
"command": "npx",
"args": [
"-y",
"@trustedskills/hainamchung-aws-penetration-testing"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill allows you to perform penetration testing on your AWS environment. It can identify vulnerabilities and misconfigurations within your AWS infrastructure, including EC2 instances, S3 buckets, and IAM roles. The tool helps assess the security posture of your cloud deployments and provides actionable insights for remediation.
When to use it
- Security Audits: Regularly test your AWS environment to ensure compliance with security best practices and identify potential weaknesses.
- New Deployments: Validate the security configuration of new applications or services deployed on AWS before they go live.
- Post-Incident Analysis: Investigate potential vulnerabilities that may have been exploited during a security incident.
- Compliance Requirements: Satisfy specific compliance requirements (e.g., PCI DSS, HIPAA) by demonstrating proactive vulnerability assessment.
Key capabilities
- AWS Infrastructure Scanning
- Vulnerability Identification
- Misconfiguration Detection
- Reporting and Remediation Guidance
Example prompts
- "Run a penetration test on my EC2 instances in the us-east-1 region."
- "Check for publicly accessible S3 buckets in my account."
- "Identify IAM roles with excessive permissions."
- "Generate a report of all detected vulnerabilities, prioritized by severity."
Tips & gotchas
- Ensure you have appropriate AWS credentials configured with sufficient permissions to scan your environment.
- Penetration testing can be disruptive; schedule scans during off-peak hours or in non-production environments whenever possible.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.