Skip to content
Get packs

Auditing AWS S3 Bucket Permissions

Audit AWS S3 buckets for public access, risky ACLs and policies, and missing encryption

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
3 files

What it does

When this skill is installed, the agent follows a structured checklist for reviewing an AWS account's S3 storage buckets. It checks which buckets are public or shared too widely, reviews access control lists and bucket policies, looks for missing encryption, versioning and logging, and can suggest or run fixes such as enabling Block Public Access. It also includes a Python script that uses the boto3 library to automate part of the listing and checking.

Great for

  • Cloud or security engineers reviewing an AWS account for accidental data exposure
  • Teams preparing for SOC 2, PCI DSS or HIPAA reviews of data access controls
  • Responders who need to quickly check S3 exposure after an alert or suspected credential compromise

Skip it if

  • Non-AWS object storage such as Google Cloud Storage or Azure Blob, which needs provider-specific tools (the skill says so itself)
  • Real-time monitoring or ongoing access-pattern analysis, which the skill points to other AWS services for
  • Non-technical users without AWS credentials, since the checks need an authenticated AWS account

Try asking

  • “Audit my AWS account for publicly accessible S3 buckets and overly permissive bucket policies”
  • “Check all of my S3 buckets for missing default encryption and disabled versioning”
  • “Run a Prowler S3 check and summarise the findings by severity”
  • “Draft a remediation plan to enable Block Public Access on the buckets that are exposed”
Step-by-step guide: how to use Auditing AWS S3 Bucket PermissionsInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    auditing-aws-s3-bucket-permissions.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip auditing-aws-s3-bucket-permissions.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip auditing-aws-s3-bucket-permissions.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the audit with a read-only IAM role first and review the commands before allowing any put-* remediation commands, which change live resources.
  • Replace the TARGET_BUCKET placeholders deliberately and confirm the account and region with aws sts get-caller-identity before running fixes.
  • Treat the script's output as a starting point; cross-check findings with IAM Access Analyzer and Prowler, since the skill's own commands contain placeholders and fragments that may need editing.

What's inside

  • references/api-reference.md
  • scripts/agent.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.