Menú
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-compute-2-3El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Basado en la clasificación ocupacional SOC
Mostrando SKILL.md
| name | cis-aws-compute-2.3 |
| description | Ensure Tag Policies are Enabled |
| category | cis-compute |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","compute","ec2","tag-policies","organizations","governance"] |
| cis_id | 2.3 |
| cis_benchmark | CIS AWS Compute Services Benchmark v1.1.0 |
| tech_stack |
| ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-compute-2.4","cis-aws-compute-2.1.1"] |
| prerequisites | [] |
| severity_boost | {} |
Tag policies help you standardize tags on all tagged resources across your organization.
You can use tag policies to define tag keys (including how they should be capitalized) and their allowed values.
Enabling tag policies may require organizations to update their tagging practices to comply with the new policy. Non-compliant tags may be rejected if enforcement is enabled.
list-policies command:aws organizations list-policies --filter TAG_POLICY
[] refer to the remediation below.Policies.Tag policies status is enabled.If Tag policies status is disabled refer to the remediation below.
The CLI should return tag policy information (not empty brackets). In the console, Tag policies status should display as enabled.
You must use an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization's management account.
enable-policy-type command:aws organizations enable-policy-type --root-id <RootID> --policy-type TAG_POLICIES
The list of PolicyTypes in the output will now include the specified policy type with the Status of ENABLED.
You must sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization's management account.
Policies.Tag policies.Enable Tag Policies.Tag policies are disabled by default in AWS Organizations.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 1.1 Establish and Maintain Detailed Enterprise Asset Inventory | x | x | x |
| v7 | 1.5 Maintain Asset Inventory Information | x | x |
Level 1 | Manual