Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-foundations-2-12El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-aws-foundations-2.12 |
| description | Ensure access keys are rotated every 90 days or less |
| category | cis-iam |
| version | 7.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","iam","access-keys","key-rotation","credentials"] |
| cis_id | 2.12 |
| cis_benchmark | CIS AWS Foundations Benchmark v7.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-foundations-2.11","cis-aws-foundations-2.13"] |
| prerequisites | [] |
| severity_boost | {} |
Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests to AWS. IAM users require access keys to make programmatic calls via the AWS CLI, SDKs, or APIs. It is recommended that all access keys be rotated regularly and at least every 90 days.
Rotating access keys reduces the window of opportunity for a compromised or exposed key to be used. Regular rotation also limits the risk associated with lost, stolen, or improperly stored credentials.
Long-lived access keys increase the risk of unauthorized access if compromised, as they may remain valid indefinitely without detection.
UsersSecurity CredentialsAccess KeysStatus = Active, ensure the Created date is within 90 daysaws iam generate-credential-report
aws iam get-credential-report --query 'Content' --output text | base64 -d
access_key_1_last_rotatedaccess_key_2_last_rotated90 daysAll active access keys should have a last_rotated date within the last 90 days. No access key should be older than 90 days.
Perform the following to rotate access keys:
UsersSecurity credentialsRotate Access Keys:
Create access keyaws iam create-access-key --user-name <user-name>
Update all applications and tools to use the new access key
Check usage of the old key:
aws iam get-access-key-last-used --access-key-id <access-key-id>
aws iam update-access-key --access-key-id <access-key-id> --status Inactive --user-name <user-name>
aws iam delete-access-key --access-key-id <access-key-id> --user-name <user-name>
By default, AWS does not enforce access key rotation. Access keys remain valid until manually deactivated or deleted.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 5.1 Establish and Maintain an Inventory of Accounts - Establish and maintain an inventory of all accounts managed in the enterprise. The inventory must include both user and administrator accounts. The inventory, at a minimum, should contain the person's name, username, start/stop dates, and department. Validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently. | x | x | x |
| v7 | 16.1 Maintain an Inventory of Authentication Systems - Maintain an inventory of each of the organization's authentication systems, including those located onsite or at a remote service provider. | x | x |
| Techniques / Sub-techniques | Tactics | Mitigations |
|---|---|---|
| T1078.004 | TA0006 | M1018 |
Level 1 | Automated