Aws Iam

This is a corrections sheet for IAM gotchas that trip up LLMs: policy evaluation edge cases like ForAllValues with empty keys, the eight privilege escalation paths through direct policy manipulation, role chaining session limits, and Organizations quirks like suspended accounts blocking removal for 90 days. It's narrow by design, covering only verified mistakes agents make repeatedly, not general IAM concepts. Use it when you're debugging weird IAM behavior or building tooling that touches roles, STS, or cross-account access. The CloudTrail logging specifics and service-specific trust policy requirements (like Redshift Serverless needing both service principals) are the kind of details you won't remember until they bite you.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.: 5
skills.sh installs: 10.9K
GitHub stars: 3.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aws/agent-toolkit-for-aws --skill aws-iam --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS IAM — Common Pitfalls

About This Skill

This skill contains verified corrections for things that AI agents frequently get wrong about IAM. It is not a comprehensive IAM guide — for full IAM guidance, search AWS documentation. When answering IAM questions, verify specific claims (limits, quotas, exact API names, edge-case behaviors) against official AWS documentation rather than relying on pre-training. Prefer fetching known documentation URLs over broad searches. Trust official documentation over memory when they conflict.

Common Workflows

Use the best available tool for AWS operations — the AWS MCP server is recommended but not required; AWS CLI or SDK may be used as alternatives. Read reference files only when the conversation requires deeper detail.

Read references/aws-iam-role-management.md if the user needs to create, scope, or maintain IAM roles when provisioning or updating AWS resources. Covers service roles, execution roles, trust policies, confused deputy protection, and permission hygiene.

SKILL.md on GitHub