shieldadvanced
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- Secure Configuration Guidance: The skill provides standard procedures for managing AWS Shield Advanced resources. It consistently recommends security best practices such as using temporary credentials, scoping IAM permissions to the minimum necessary actions, and enabling CloudTrail for audit logging.- Data Security Considerations: The instructions include specific warnings about protecting sensitive data, such as encrypting CloudTrail logs and SNS notifications with SSE-KMS, and ensuring that log buckets shared with the Shield Response Team (SRT) do not contain PII or secrets in clear text.- Third-Party Access Management: When granting access to the Shield Response Team (SRT), the skill includes instructions to prevent 'confused deputy' attacks by using the
aws:SourceAccountcondition in IAM trust policies.- Subscription Awareness: The skill explicitly warns users about the financial commitment and auto-renewal nature of the Shield Advanced subscription before they proceed.
Audit Metadata