Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-3-3La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basé sur la classification professionnelle SOC
Affichage de SKILL.md
| name | cis-aws-database-3.3 |
| description | Ensure to Create a Virtual Private Cloud (VPC) |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","rds","vpc","network-security","segmentation"] |
| cis_id | 3.3 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-3.4","cis-aws-database-3.12"] |
| prerequisites | [] |
| severity_boost | {} |
Setting up a Virtual Private Cloud (VPC) protects the private network that has been established from any external networks from interfering. It allows internal networks to communicate with one another with the network that has been established.
A VPC provides network isolation and segmentation for RDS instances, ensuring that database traffic is contained within a private network boundary.
Builds a strong connection between internal networks, and the internet, and it secures your data from getting into the hand of an unauthorized party.
Sign in to the AWS Management Console
Open the Amazon VPC Console
Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/vpc/.Create a VPC
Your VPCs in the left-side menu.Create VPC to begin creating a new VPC.Create to create the VPC.Create Subnets
Subnets in the left-side menu.Create subnet to create a subnet within the VPC.Create to create the subnet.Configure Route Tables
Route Tables in the left-side menu.Create route table to create a new route table.Create to create the route table.Subnet associations tab.Edit subnet associations and select the desired subnets to associate them with the route table.Configure Security Groups
Security Groups in the left-side menu.Create security group to create a new security group.Create to create the security group.Configure Network Access Control Lists (ACLs)
Network ACLs in the left-side menu.Create network ACL to create a new network ACL.Subnet associations tab.Edit subnet associations and select the desired subnets to associate them with the network ACL.Use the VPC with Amazon RDS
All RDS instances should be deployed within a properly configured VPC with appropriate subnets, route tables, security groups, and network ACLs.
Follow the audit steps above to create and configure a VPC. For existing RDS instances not in a VPC, create a snapshot, then restore it into the desired VPC.
AWS creates a default VPC in each region, but custom VPCs should be created for production RDS deployments.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 12.2 Establish and Maintain a Secure Network Architecture | x | x | |
| v7 | 11.7 Manage Network Infrastructure Through a Dedicated Network | x | x |
Level 1 | Manual