dms-schema-conversion
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [AWS Infrastructure Management]: The skill executes various
aws dms,aws rds,aws iam,aws s3, andaws secretsmanagercommands to automate the creation and management of migration resources. These operations are performed within the user's authenticated session. - [Credential Management Best Practices]: The skill explicitly instructs the user to store database credentials in AWS Secrets Manager and provides guidance on creating dedicated database users with minimal permissions. It avoids displaying or logging sensitive passwords.
- [S3 Security Configuration]: The setup wizard configures S3 buckets with recommended security settings, including versioning, public access blocks, and bucket policies that enforce encrypted transport (SSL).
- [IAM Role Management]: The skill assists in creating specific IAM roles for Secrets Manager and S3 access, incorporating trust policy conditions (e.g.,
aws:SourceAccount,aws:SourceArn) to protect against confused deputy attacks.
Audit Metadata