remediating-s3-bucket-misconfiguration SKILL.md skillA

remediating-s3-bucket-misconfiguration from adriannoes/awesome-agentic-ai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add adriannoes/awesome-agentic-ai/remediating-s3-bucket-misconfiguration@v1.0.0

Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
adriannoes/awesome-agentic-ai
Path
cursor-claude-codex/skills/anthropic-cybersecurity-skills/skills/remediating-s3-bucket-misconfiguration/SKILL.md
Versions recorded
2
Latest version
v1.0.0, committed Jun 25, 2026
First version recorded
Jun 11, 2026
Size
11,914 bytes
Repository stars
69
License
MIT

'This skill provides step-by-step procedures for identifying and remediating.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Remediating S3 Bucket Misconfiguration

## When to Use

- When AWS Config or Security Hub reports S3 buckets with public access or missing encryption
- When a security scan reveals S3 bucket policies granting access to Principal "*" (everyone)
- When preparing for a data protection audit requiring evidence of storage security controls
- When responding to a data exposure incident involving publicly accessible S3 objects
- When establishing preventive controls for new S3 bucket creation across an AWS Organization

**Do not use** for Azure Blob Storage or GCP Cloud Storage misconfigurations, for S3 data classification (see implementing-cloud-dlp-policy), or for S3 access pattern analysis unrelated to security.

## Prerequisites

- AWS account with S3 administrative permissions (s3:*, s3-outposts:*)
- AWS Config enabled to evaluate S3 resource compliance
- AWS CloudTrail logging S3 data events for access auditing
- Macie enabled for sensitive data discovery in S3 buckets

## Workflow

### Step 1: Identify All Public and Misconfigured Buckets
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add adriannoes/awesome-agentic-ai/remediating-s3-bucket-misconfiguration@sha256:746c501fe8345a7c

The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_f7ddyftozmknby2x.svg)](https://markdownregistry.com/a/art_f7ddyftozmknby2x)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Jun 11, 2026 and Jun 25, 2026, about one every 14 days.

versioncommittedcommitsizeaudit
v1.0.0 latest2026-06-25 f69bd81 11,914 BA view · diff
v1.0.02026-06-11 ff4cc7c 11,854 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (11914 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

adriannoes/awesome-agentic-ai · 69 stars · license MIT · pushed 2026-10-10 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_f7ddyftozmknby2x
GET https://markdownregistry.com/api/v1/resolve?ref=adriannoes/awesome-agentic-ai/remediating-s3-bucket-misconfiguration
GET https://markdownregistry.com/api/v1/blob/746c501fe8345a7c8c7838c38b71c69063b07d95578acbce40ff586e267e61ca

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from adriannoes/awesome-agentic-ai

AGENTS.md AGENTS.md file
adriannoes/awesome-agentic-ai · AGENTS.md
git:20261010.a9840fe · audit A · 69 stars
CLAUDE.md CLAUDE.md file
adriannoes/awesome-agentic-ai · CLAUDE.md
git:20260926.71e9bd2 · audit A · 69 stars
DESIGN.md@cursor-claude-codex/references/design-md/examples/atmospheric-glass DESIGN.md file
adriannoes/awesome-agentic-ai · cursor-claude-codex/references/design-md/examples/atmospheric-glass/DESIGN.md
git:20260611.bc2fd87 · audit A · 69 stars
DESIGN.md@cursor-claude-codex/references/design-md/examples/paws-and-paths DESIGN.md file
adriannoes/awesome-agentic-ai · cursor-claude-codex/references/design-md/examples/paws-and-paths/DESIGN.md
git:20260611.bc2fd87 · audit A · 69 stars
DESIGN.md@cursor-claude-codex/references/design-md/examples/totality-festival DESIGN.md file
adriannoes/awesome-agentic-ai · cursor-claude-codex/references/design-md/examples/totality-festival/DESIGN.md
git:20260611.bc2fd87 · audit A · 69 stars
CLAUDE.md@cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro CLAUDE.md file
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/CLAUDE.md
git:20260611.ff4cc7c · audit A · 69 stars
browserstack SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/browserstack/SKILL.md · Run tests on BrowserStack. Use when user mentions "browserstack", "cross-browser", "cloud testing", "browser matrix"…
git:20260611.ff4cc7c · audit A · 69 stars
coverage SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/coverage/SKILL.md · Analyze test coverage gaps. Use when user says "test coverage", "what's not tested", "coverage gaps", "missing tests"…
git:20260611.ff4cc7c · audit A · 69 stars
fix SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/fix/SKILL.md · Fix failing or flaky Playwright tests. Use when user says "fix test", "flaky test", "test failing", "debug test", "test…
git:20260611.ff4cc7c · audit A · 69 stars
generate SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/generate/SKILL.md · Generate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component"…
git:20260625.f69bd81 · audit A · 69 stars
init SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/init/SKILL.md · Set up Playwright in a project. Use when user says "set up playwright", "add e2e tests", "configure playwright"…
git:20260611.ff4cc7c · audit A · 69 stars
migrate SKILL.md skill
adriannoes/awesome-agentic-ai · cursor-claude-codex/skills/alirezarezvani-skills/playwright-pro/skills/migrate/SKILL.md · Migrate from Cypress or Selenium to Playwright. Use when user mentions "cypress", "selenium", "migrate tests", "convert…
git:20260611.ff4cc7c · audit A · 69 stars

Every file in adriannoes/awesome-agentic-ai

Browse by kind, by grade A, or by owner.