aws-github-oidc-scoped-role
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains OpenTofu/Terraform templates for AWS IAM configuration. The provided patterns prioritize security by demonstrating how to scope OIDC trust to specific workflow files rather than entire repositories. It also correctly highlights the need for explicit 'Deny' statements for sensitive actions (like reading secrets or decrypting data) when using the broad 'ReadOnlyAccess' policy for AI agents, which is a significant security best practice. All external references target trusted domains such as GitHub and AWS.
Audit Metadata