Cloud Security Audit & Hardening Assistant
Audit cloud infrastructure for security gaps and compliance risks
What You Can Do
You can systematically audit cloud infrastructure against industry frameworks like CIS Benchmarks, NIST, and PCI-DSS to identify security gaps and misconfigurations. Claude generates prioritized remediation plans ranked by risk level, along with policy-as-code templates (Terraform, CloudFormation) you can implement immediately. You'll also receive compliance mapping documentation and evidence artifacts suitable for auditors.
Features
Evaluate infrastructure against CIS Benchmarks, NIST CSF, PCI-DSS, HIPAA, and custom baselines
Identify IAM overreach, exposed secrets, unencrypted storage, and network exposure across cloud services
Prioritize findings by severity and business impact with implementation timelines and effort estimates
Export remediation steps as Terraform, CloudFormation, or CDK code ready for CI/CD pipelines
Generate audit reports with sample logs, screenshots, and attestations for regulatory compliance
Define and enforce organization-specific security policies beyond industry standards
Model security posture improvements and cost implications of changes
Audit AWS, Azure, and GCP simultaneously with framework-agnostic recommendations
Example Output
Assessment Report
Critical Findings: 3
- RDS instances lack encryption at rest
- S3 bucket policies allow public read access
- IAM users have overly permissive attach-policy permissions
High-Risk Findings: 8
- CloudTrail not enabled in all regions
- VPC Flow Logs disabled on production subnets
Remediation Plan
Week 1 — Immediate Actions:
- ✓ Enable RDS encryption via KMS (zero-downtime snapshot method)
- ✓ Restrict S3 bucket ACLs to private with bucket policy validation
- ✓ Apply least-privilege IAM roles using policy simulator
Terraform Code (Ready to Deploy)
resource "aws_rds_cluster" "hardened" {
storage_encrypted = true
kms_key_id = aws_kms_key.rds.arn
}
resource "aws_s3_bucket_acl" "restricted" {
bucket = aws_s3_bucket.data.id
acl = "private"
}
What's Included
- SKILL.md: Complete audit and hardening workflow with decision trees for AWS, Azure, and GCP
- Assessment templates: Security checklists aligned with CIS, NIST, and PCI-DSS for each cloud platform
- Remediation workflow: Step-by-step playbooks organized by finding category and severity level
- Compliance mapping reference: Cross-reference how your infrastructure aligns with regulatory frameworks
- Policy-as-code templates: Production-ready Terraform, CloudFormation, and Bicep examples for common remediations
- Custom baseline templates: YAML/JSON schemas for defining organization-specific security standards
- Audit report generator: Template for compliance documentation with executive summary and detailed findings
- Evidence collection checklist: Sample logs, configuration exports, and attestation templates for auditors
Who It's For
- Cloud security architects — Design and validate secure cloud platforms aligned with organizational standards
- DevOps engineers — Harden infrastructure and integrate security controls into CI/CD pipelines
- Compliance officers — Prepare for audits and demonstrate regulatory alignment with SOC 2, ISO 27001, and HIPAA
- IT audit teams — Conduct systematic security assessments and compliance reviews across cloud environments
- Security consultants — Deliver comprehensive hardening recommendations and audit reports to clients
Best For
- Pre-migration cloud security reviews — Audit architecture before moving workloads to the cloud
- Compliance gap analysis — Identify what's missing for SOC 2, ISO 27001, or HIPAA certification
- Quarterly security hardening cycles — Stay aligned with evolving threat landscape and best practices
- Post-incident remediation planning — Prioritize fixes after a security event or penetration test findings
- Third-party vendor security assessments — Evaluate cloud infrastructure your organization depends on
You might also like
You can accelerate your entire antenna design workflow—from initial concept to optimized specifications—by leveraging Claude's knowledge of electromagnetic theory, antenna types, and design trade-offs. Claude helps you parameterize designs, identify optimal configurations for your frequency band and application, and prepare detailed briefs for simulation and manufacturing. You'll generate design reviews, impedance-matching solutions, and validation checklists without context-switching to multiple tools.
You can convert raw API code, OpenAPI specs, GraphQL schemas, and implementation details into production-ready reference documentation. The skill generates systematically organized endpoint documentation with parameter tables, real request/response examples, error code catalogs, authentication details, rate limits, and SDK usage snippets in multiple programming languages—creating the authoritative developer reference for REST APIs, GraphQL APIs, WebSocket APIs, and webhook schemas.
Rapidly analyze production incidents by correlating observability signals—logs, metrics, traces, and events—to identify the true root cause instead of symptoms. You'll reconstruct incident timelines, quantify impact scope, and generate both immediate remediation steps and long-term prevention measures.
This skill guides you through designing Kalman filters for your specific state estimation and sensor fusion problems. You'll learn to diagnose filter divergence, tune covariance matrices (Q and R), and validate observability—turning mathematical theory into production-ready filters. The skill provides step-by-step workflows, diagnostic tools, and practical templates for common applications like GPS/IMU fusion, SLAM, and aircraft navigation.
Claude analyzes your code diffs and generates standardized commit messages that follow the Conventional Commits specification. The skill automatically determines the correct commit type, scope, and description based on the changes you've made, ensuring your messages are parseable by automation tools while remaining human-readable for code reviewers.
You'll transform high-level feature requirements into a complete development plan covering API design, frontend implementation, testing strategy, and documentation. The skill helps you identify dependencies, parallelize work across frontend and backend teams, and establish quality gates that ensure features ship bug-free with proper error handling and logging.
Transform schema and data changes into production-ready migration packages that protect data integrity and minimize downtime. You can handle column additions, renames, type conversions, and backfills using proven patterns like expand-contract and shadow tables. The skill generates explicit rollback scripts, validation checklists, and phased execution plans that keep applications stable throughout the migration.
You can rapidly design, optimize, and validate chromatographic and LC-MS/MS methods for analyzing drugs and metabolites in biological matrices. This skill guides you through analytical method development workflows—including parameter selection, sensitivity optimization, and regulatory strategy—while ensuring ICH Q2(R2) and FDA compliance throughout the development process.