couchbase-security-hardeninglisted

Harden and audit Couchbase security posture for production deployments. Use whenever the user asks about TLS configuration, mTLS, certificate management, LDAP integration, SAML, PAM authentication, audit logging, audit log configuration, network isolation, firewall rules for Couchbase, RBAC design, least-privilege, password policy, account lockout (8.x), encryption at rest (DARE), KMIP key management, compliance (SOC2, HIPAA, PCI-DSS, FedRAMP), security hardening checklist, admin_encryption_*, admin_kmip_*, or 'how do I secure Couchbase for production.' Distinct from couchbase-mcp (calling the tools) and couchbase-app-integration (TLS in SDK clients). Use proactively for new production deployments, compliance reviews, security audits, and pre-certification hardening.
celticht32/Couchbase-Skills-for-Claude.ai · ★ 1 · AI & Automation · score 77

Install: claude install-skill celticht32/Couchbase-Skills-for-Claude.ai

# Couchbase Security Hardening A skill for *hardening* Couchbase deployments — TLS, RBAC, audit logging, encryption at rest, external authentication, network isolation, and compliance alignment. Distinct from: - `couchbase-mcp` — calling the security tools (`admin_user_*`, `admin_encryption_*`, etc.) - `couchbase-app-integration` — TLS/mTLS configuration in SDK client code ## When this skill applies - "How do I secure Couchbase for production?" - "How do I set up TLS / enforce TLS-only connections?" - "How do I integrate Couchbase with LDAP / Active Directory?" - "How do I design RBAC for my team?" - "What audit logging should I enable?" - "How do I enable encryption at rest (DARE)?" - "What's KMIP and when do I need it?" - "How do I harden Couchbase for SOC2 / HIPAA / PCI?" - "How do I configure password policy and account lockout?" ## Pick the right reference | Question | Read | |---|---| | "TLS — enabling, certificate rotation, enforcing TLS-only, mTLS" | `references/tls.md` | | "RBAC — role design, least-privilege, service accounts, group structure" | `references/rbac.md` | | "External auth — LDAP, Active Directory, SAML, PAM" | `references/external-auth.md` | | "Audit logging — what to enable, log rotation, SIEM integration" | `references/audit-logging.md` | | "Encryption at rest — DARE, KMIP, key rotation" | `references/encryption-at-rest.md` | | "Network hardening — ports, firewall rules, node-to-node TLS" | `references/network-hardening.md` | ## Security harden