The Agent Skills Directory

Standard AWS Resource Management: The skill uses established AWS CLI commands (aws wafv2) to configure Web ACLs, managed rules, and logging. These are standard operations for infrastructure-as-code and security management tasks within the AWS ecosystem.
Comprehensive Security Best Practices: The instructions consistently prioritize safety by requiring the use of 'Count' mode before enforcing 'Block' actions to prevent accidental service disruption. It also mandates redacting sensitive headers (such as authorization and cookie) in logs and ensuring encryption at rest for all log destinations.
Header Spoofing Protections: The skill includes a dedicated procedure for stripping inbound x-amzn-waf-* headers. This prevents attackers from forging signals that the application origin might trust, addressing a specific security gap in WAF custom header handling.
Least Privilege and Ephemeral Credentials: The 'Security Considerations' sections throughout the skill explicitly instruct the agent to use temporary IAM roles and only the specific permissions necessary for each task (e.g., wafv2:CreateWebACL), adhering to the principle of least privilege.
Trusted External References: All external links and documentation references point to official AWS domains (aws.amazon.com and docs.aws.amazon.com), which are trusted sources for technical guidance.

waf