'least-privilege' 검색 결과

Configure and audit AWS users, roles, and access policies. Work through least-privilege permissions, granting only the access needed, along with GitHub Actions authentication, cross-account access, permission boundaries, and checks for unused or excessive access.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create execution roles for EC2 and Lambda
• Design policies with only the required permissions
• Configure GitHub Actions authentication through OIDC

Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit AWS IAM policies for excessive permissions
• Find permission combinations that enable privilege escalation
• Trace risky policies to affected users and roles

Enhancement overlay for multi-agent / tool-using coder agents. Encodes the per-agent tool- scoping discipline that role-based frameworks (CrewAI, LangChain) document only as a passing best-practice: which agent gets which tool, and why blanket-sharing every tool to every agent is a correctness and blast-radius risk. Activates when an agent system has tools AND there is more than one agent (or one agent holding many tools). Treat a tool as a capability grant; scope by least-privilege. ENHANCE overlay — read alongside [[crewai]], [[agentsop-http-tool-wrapping]], [[agentsop-llm-tool-idempotency]]. Search keywords: which tools per agent, least-privilege agent, agent tool access, tool permissions, limit agent tools, scope tools to roles.overlay_type: enhancement

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

tespit etme
AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

상시 실행되는 AI 에이전트의 시작·중지, 로그 모니터링, 권한 관리, 단계적 업데이트와 롤백 절차를 정리합니다. 장애 대응과 성공률·비용 평가를 지원합니다.

• 상시 실행 에이전트의 운영 설계하기
• 실패가 급증할 때 장애 대응하기
• 업데이트와 롤백 절차 마련하기

Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing CI workflows for security issues
• Checking privileged triggers that run fork code
• Restricting GITHUB_TOKEN permissions

Design and validate rules that limit communication between servers and containers to necessary connections. The skill covers traffic mapping, label-based policies, staged enforcement, and checks for unauthorized movement between systems within a zero trust architecture.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning communication rules for a zero trust network
• Separating production and development environments
• Restricting access to critical applications

Analyze existing user permissions to propose roles for role-based access control, which assigns permissions by job role. Compare candidate role sets, identify overlap and excess access, and validate definitions against business responsibilities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Consolidating overlapping access roles
• Redesigning roles from existing permission data
• Reviewing excess and unusual permissions

Audit AWS S3 buckets for public exposure, excessive permissions, and gaps in encryption or versioning settings. Use AWS CLI, Prowler, and access analysis to compile findings, prioritize issues, and plan or apply configuration fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing S3 settings in a newly onboarded AWS account
• Investigating alerts about publicly exposed buckets
• Preparing periodic access control audit reports

Audit Kubernetes access rules to find excessive permissions and service account token abuse paths. Trace which users or workloads could gain cluster administrator access, then produce prioritized findings and recommendations for reducing permissions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing Kubernetes privilege escalation paths
• Checking permissions after an RBAC change
• Tracing workloads with overprivileged service accounts

Make your local gbrain accessible to other devices and cloud agents through MCP, a connection interface for AI tools. Set up Tailscale access, assign limited permissions to each client, configure authentication, and verify connections.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Accessing gbrain from another laptop or phone
• Connecting cloud agents to your local gbrain
• Giving each client limited access permissions

Investigate Google Cloud access denials and choose a resolution path based on the caller’s permissions. Supports temporary access activation, structured escalation tickets, policy analysis, and administrator selection of roles that grant only the permissions needed.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating Google Cloud access denials
• Activating temporary access for development
• Preparing access issue tickets for administrators

Review Slack access requests against Okta role and team information, then prepare narrowly scoped GitHub or AWS IAM permissions. Apply changes only after an eligible person's approval and record the grant, reasoning, approver, and timestamp.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing GitHub repository access requests from Slack
• Preparing AWS IAM permissions for a specific task
• Routing sensitive access requests for additional review

Help users create and manage mirrord preview environments — running a modified service as an isolated pod in a shared Kubernetes cluster, scoped by an environment key and HTTP/queue traffic filtering, so teams can validate and review changes against real traffic without affecting live services. Use when a developer wants to run "mirrord preview" ad hoc, share a preview via a link (mirrord-share-ingress), or wire preview environments into CI with the metalbear-co/mirrord-preview GitHub Action (e.g. per-PR previews, least-privilege cluster access).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Operate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using `doca-urom`: pull the NGC image, choose the UCX component, size queues, configure Comch pairing, and align host and service versions. SECURITY: the service has no standalone access control; Comch pairing and RDMA permissions are the boundary. Pair only intended hosts, expose least-privilege memory regions, and verify both views before start. Trigger for slow UCX collectives, unexpected NOT_PERMITTED, or missing completions. Do not use for host application code, MPI/UCX integration design, or DOCA install.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS encryption keys, automatic rotation, least-privilege IAM policies, CloudTrail auditing, and lifecycle management that are essential for production-grade secret handling.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security groups, encrypted EBS volumes, and comprehensive tagging. Use when deploying new EC2 instances following AWS best practices for security and cost optimization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Choose and configure Attio REST authentication for a single workspace or multi-workspace OAuth app, including least-privilege scopes and a read-only verification. Use when connecting a service to Attio. Trigger with "Attio auth", "Attio API key", or "Attio OAuth setup".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden an Attio integration with least-privilege credentials, tenant isolation, log redaction, raw-body webhook verification, idempotency, and incident-ready rotation. Use when reviewing Attio security controls or preparing production access. Trigger with "Attio security", "secure Attio integration", or "Attio webhook signature".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.