Cloud Security Configuration

This is your checklist for locking down AWS, Azure, and GCP environments with IAM policies, encryption, network controls, and threat detection. You get quick start commands for enabling GuardDuty, CloudTrail, S3 encryption, and VPC flow logs, plus reference guides for Terraform and each major cloud provider. It's built around the defense-in-depth model with multiple security layers. The best practices section is solid on basics like least privilege and MFA, though you'll still need to tailor everything to your specific compliance requirements. Most useful when you're setting up greenfield infrastructure or doing a security audit on existing cloud resources.

skills.sh installs: 472
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill cloud-security-configuration --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Cloud security requires comprehensive strategies spanning identity management, encryption, network controls, compliance, and threat detection. Implement defense-in-depth with multiple layers of protection and continuous monitoring.

When to Use

Protecting sensitive data in cloud
Compliance with regulations (GDPR, HIPAA, PCI-DSS)
Implementing zero-trust security
Securing multi-cloud environments
Threat detection and response
Identity and access management
Network isolation and segmentation
Encryption and key management

Quick Start

Minimal working example:

# Enable GuardDuty (threat detection)
aws guardduty create-detector \
  --enable \
  --finding-publishing-frequency FIFTEEN_MINUTES

# Enable CloudTrail (audit logging)
aws cloudtrail create-trail \
  --name organization-trail \
  --s3-bucket-name audit-bucket \
  --is-multi-region-trail

SKILL.md on GitHub