Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-3-4La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Basé sur la classification professionnelle SOC
Affichage de SKILL.md
| name | cis-aws-database-3.4 |
| description | Ensure to Configure Security Groups |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","rds","security-groups","network-security","firewall"] |
| cis_id | 3.4 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-3.3","cis-aws-database-3.12"] |
| prerequisites | [] |
| severity_boost | {} |
Configuring security groups benefits the user because it helps manage networks within the database and gives only certain permission for traffic that leaves and enters the database.
Security groups act as virtual firewalls that control inbound and outbound traffic to RDS instances. Proper configuration ensures only authorized access.
Allows certain users to access the instance and it only allows them to work within that network.
Sign into the AWS Management Console
Open the Amazon RDS Console
Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/rds/.Select the RDS Instance
Navigate to the Connectivity & Security Section
Connectivity & Security or "Security" section.View and Modify Existing Security Groups
Security section, you will see the existing security groups associated with the RDS instance.Create a New Security Group
Create New Security Group button.Modify Security Group Rules
Modify button next to it.Save or Apply Changes to update the security group rules.Associate Security Groups
Connectivity & Security or Security section of the instance details page.Modify next to the VPC security groups option.Save or Apply Changes to associate them with the RDS instance.Verify and Test Security Group Configuration
Monitor and Update Security Groups
Security groups should be configured with the principle of least privilege, allowing only necessary inbound traffic from trusted sources on required ports.
Follow the audit steps above to review and configure security groups. Remove overly permissive rules (e.g., 0.0.0.0/0) and restrict access to specific IP ranges and ports.
The default security group allows all outbound traffic and restricts inbound traffic to the same security group.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Level 1 | Manual