Security audit
Assess AWS/EKS security controls and evidence, including optional AWS Security Agent workflows when requested and configured.
Workflow
Define scope and required controls; inspect identity and access, pod security, networking, encryption, secrets, audit logging, and runtime posture; validate findings; rank confirmed risk; propose specific fixes and verification.
Coverage
IRSA/Pod Identity trust; RBAC and access entries; Pod Security Standards; SGs/network policies/endpoints; KMS and storage protection; secrets handling; control-plane/audit logging.
Reporting and boundaries
Apply the repository's AWS security mandates and the source skill's Global AWS Security Mandates in full. Penetration testing requires the appropriate explicit scope and authorization.
The source skill contains the command playbooks, decision trees, examples, reference files, and host/team integration. Consult it for the exact operation being performed.