terraform-data-engineering-infrastructure
Warn
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone source code from an unverified third-party GitHub repository (josephmachado/iac-for-data-engineering-terraform-.git), which has not been vetted for security.
- [COMMAND_EXECUTION]: The instructions recommend creating an IAM user with highly permissive administrative policies, such as AmazonS3FullAccess, AmazonEC2FullAccess, and IAMFullAccess, which violates the security principle of least privilege.
- [COMMAND_EXECUTION]: The provided Terraform configuration defines an EC2 security group that allows inbound SSH traffic from any IP address (0.0.0.0/0), exposing the infrastructure to potential brute-force and unauthorized access attempts.
- [COMMAND_EXECUTION]: The EC2 instance configuration includes a user_data shell script that executes commands and installs Python packages with root privileges during the instance boot process.
Audit Metadata