aws-compliance-checker – DevOps & Infrastructure skill for AI agents
Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks
Install the aws-compliance-checker skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/aws-compliance-checker-160e4.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /aws-compliance-checker – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/aws-compliance-checker-160e4.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $aws-compliance-checker – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/aws-compliance-checker-160e4.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /aws-compliance-checker – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/aws-compliance-checker-160e4.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /aws-compliance-checker – then describe the task you want done.
SKILL.md content
AWS Compliance Checker
Automated compliance validation against industry standards including CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2.
Detailed Guide
Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.
Review scope and execution boundaries
Select the exact account/role, partition, regions and control/framework version before collecting evidence; verify identity with aws sts get-caller-identity. Read-only assessment is the default. Commands that create MFA devices, change policies/keys, enable services, rotate secrets or create alarms require an approved change scope and rollback plan. Keep evidence and secret material out of shared logs.
These are partial examples, not certification or complete benchmark implementations. Control numbers are illustrative historical mappings, not a pinned current benchmark. Record PASS/FAIL/UNKNOWN/NOT-APPLICABLE per control with evidence and coverage. AccessDenied, API errors, missing permissions, absent pages and unimplemented checks are UNKNOWN, never PASS. Use paginators for SDK listings and cover all selected regions/accounts; never infer completeness from no findings. Shell snippets require Bash/GNU date, AWS CLI, jq and error checking (set -euo pipefail in complete scripts). Generate the IAM credential report first, wait for COMPLETE and decode its base64 Content; parse CSV by header in production. Credential reports are sensitive.
When to Use
Use this skill when you need to validate AWS compliance against industry standards, prepare for audits, or maintain continuous compliance monitoring.
Example Prompts
- "Run CIS AWS Foundations compliance check"
- "Generate a PCI-DSS compliance report"
- "Check HIPAA compliance for my AWS account"
- "Audit against SOC 2 requirements"
- "Create a compliance dashboard"
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related skills
- aws-cost-cleanup – Automated cleanup of unused AWS resources to reduce costs
- aws-cost-operations – AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing…
- aws-cost-optimization – Reduce AWS spend with rightsizing, autoscaling, commitment planning, and storage…
- aws-cost-optimizer – Comprehensive AWS cost analysis and optimization recommendations using AWS CLI and Cost…
- aws-ec2 – Manage EC2 instances, AMIs, and auto-scaling groups. Configure security groups, key…
- aws-ecs-fargate – Deploy containers on ECS and Fargate. Configure task definitions, services, and load…
- aws-iam – Manage IAM users, roles, and policies. Implement least-privilege access and security…
- aws-iam-best-practices – IAM policy review, hardening, and least privilege implementation