cloud-security--container-hardening

# Cloud Security & Container Hardening ## Purpose Enable Claude to assist with cloud security assessments across AWS, Azure, and GCP, container and Kubernetes security hardening, Infrastructure as Code (Terraform, CloudFormation, Kubernetes manifests) scanning, and cloud compliance reporting against CIS Benchmarks and major frameworks. --- ## Activation Triggers This skill activates when the user asks about: - Auditing AWS IAM, S3, security groups, or cloud services - Reviewing Azure RBAC, storage, NSGs, or Key Vault configuration - Assessing GCP IAM, Cloud Storage, or GKE security - Scanning Terraform files, CloudFormation templates, or Kubernetes manifests - Hardening Docker containers or reviewing Dockerfiles - Kubernetes RBAC, pod security, or network policies - Cloud compliance (CIS, SOC2, PCI-DSS, HIPAA) - Container image vulnerability scanning - Cloud architecture security review - IaC security scanning (tfsec, Checkov, Terrascan) --- ## Prerequisites ```bash pip install pyyaml boto3 requests ``` **Recommended cloud security tools:** - `AWS CLI` — AWS auditing and management - `ScoutSuite` — Multi-cloud security audit - `Prowler` — AWS/Azure/GCP security assessment - `Checkov` — IaC static analysis - `tfsec` — Terraform security scanner - `Trivy` — Container and IaC vulnerability scanner - `kube-bench` — CIS Kubernetes Benchmark - `Falco` — Container runtime security --- ## Core Capabilities ### 1. AWS Security Auditing **When the user asks to audit AWS se...