setting-up-cloudtrail-multi-region
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- AWS Command Execution: The skill relies on executing AWS CLI commands via the
call_awstool to provision and configure cloud resources. This is the primary method for the skill to perform its intended tasks of infrastructure setup. - IAM Role and Policy Configuration: The instructions involve creating an IAM role and attaching inline policies to facilitate logging from CloudTrail to CloudWatch. The skill correctly identifies this as a sensitive operation and includes guidance to follow the principle of least privilege, specifically advising against the use of wildcard access policies.
- Input Parameter Handling: The skill uses parameters (like trail names and bucket names) that are interpolated into shell commands. While this is a standard pattern for automation skills, it relies on the execution environment to handle input sanitization correctly.
Audit Metadata