aws-deployment
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- Standard AWS CLI Usage: The skill uses standard AWS CLI commands and buildspec.yml configurations to document how to use AWS CodeSuite services (CodePipeline, CodeBuild, CodeDeploy). All commands and API actions trace back to official AWS infrastructure.
- Security Best Practices: The documentation correctly emphasizes the use of AWS Secrets Manager and Parameter Store instead of plaintext secrets, and mandates the use of customer-managed KMS keys for cross-account encryption.
- IAM Least Privilege: The skill provides specific IAM policy examples that recommend scoping permissions to specific resource ARNs rather than using wildcards, which aligns with security best practices.
- Official Resource References: All external links point to official AWS documentation (
docs.aws.amazon.com). No third-party downloads or remote code executions from untrusted sources were detected.
Audit Metadata