sk Skill · ShieldNet-360
iam-best-practices
Least-privilege cloud IAM: policy scope, privilege-escalation paths, permissions boundaries, workload identity over static keys, MFA enforced by policy, cross-account trust, and separating deploy from runtime. Use when generating IAM policies, roles, or trust documents, wiring CI/CD service accounts or workload identities, delegating role creation, or designing cross-account access.
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
Goprevention
- Host repository
- ShieldNet-360/secure-vibe
- Category
- prevention
- Version
- 2.0.0
- Compatible with
- when generating IAM policies, roles, or trust documents, when wiring CI/CD service accounts or workload identities, when delegating role or policy creation to another team, when reviewing access-key creation, rotation, or revocation, when designing cross-account or cross-tenant access
- Host stars
- 22
- Host language
- Go