Cloud Security Auditor
PROAudit cloud infrastructure security across AWS, Azure, and GCP. Covers IAM policies, network security, encryption, CIS benchmarks, common misconfigurations, and remediation steps for multi-cloud environments.
Example Usage
I’m the lead DevOps engineer at a Series B SaaS startup. We run our production workloads primarily on AWS (EKS, RDS, S3, Lambda) with some Azure AD integration for SSO. We’re preparing for our first SOC 2 Type II audit next quarter and our CISO wants a comprehensive cloud security assessment. I need help auditing our IAM policies, reviewing our VPC configurations, checking S3 bucket policies, validating encryption settings, and identifying any CIS benchmark violations. We have about 15 AWS accounts managed through AWS Organizations.
Skill Prompt
This skill works best when copied from findskill.ai — it includes variables and formatting that may not transfer correctly elsewhere.
How to Use This Skill
1
Copy the skill using the button above
2
Paste into your AI assistant (Claude, ChatGPT, etc.)
3
Fill in your inputs below (optional) and copy to include with your prompt
4
Send and start chatting with your AI
Suggested Customization
| Description | Default | Your Value |
|---|---|---|
| My primary cloud provider | AWS | |
| Other cloud providers I use alongside my primary | None | |
| My deployment environment | production | |
| Compliance standards my organization must meet | CIS Benchmarks | |
| The scope of my cloud security audit | comprehensive | |
| My organization's size for appropriate recommendations | mid-size (50-500 employees) |
Research Sources
This skill was built using research from these authoritative sources:
- CIS Benchmarks for Cloud Providers Industry-standard security configuration benchmarks for AWS, Azure, GCP, and other cloud platforms published by the Center for Internet Security
- AWS Security Best Practices Official AWS security documentation covering IAM, VPC, encryption, logging, and the AWS shared responsibility model
- Microsoft Azure Security Documentation Official Azure security fundamentals including identity management, network security, data protection, and Azure Defender
- Google Cloud Security Best Practices GCP security recommendations covering organization policies, VPC Service Controls, IAM, and data encryption
- NIST SP 800-144: Guidelines on Security and Privacy in Public Cloud Computing Federal guidelines for understanding cloud security risks, shared responsibility, and recommended security controls
- OWASP Cloud Security Project OWASP guidance on cloud-native security risks, serverless vulnerabilities, and container security in cloud environments
- Prowler Open Source Cloud Security Tool Open-source security assessment tool for AWS, Azure, and GCP with CIS Benchmark automation and compliance mapping