Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-3-7La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Affichage de SKILL.md
Basé sur la classification professionnelle SOC
| name | cis-aws-database-3.7 |
| description | Ensure to Implement Access Control and Authentication |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","rds","access-control","authentication","iam"] |
| cis_id | 3.7 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-3.4","cis-aws-database-3.13"] |
| prerequisites | [] |
| severity_boost | {} |
Users should select whether they like to enable authentication. If they want to authenticate a password would be required, which would only allow the authorized person to access the database. Defining access control allows specific workers in a business access to the database.
Implementing proper access control and authentication ensures that only authorized users can access the database, reducing the risk of unauthorized data access or modification.
Proper access control restricts database access to authorized users only, preventing unauthorized access and potential data breaches.
Sign into the AWS Management Console
Open the Amazon RDS Console
Find Services search bar or by directly accessing the console at https://console.aws.amazon.com/rds/.Select the RDS Instance
Configuration or Connectivity & Security section.Enable IAM Database Authentication
Connectivity or Connectivity & Security section.Modify or Edit option to enable IAM Database Authentication.Continue or Save to apply the changes.Create and Configure IAM Database Users
Users in the left-side menu in the Amazon RDS console.Create database user to create a new IAM database user.Password-based or IAM authentication.Create to create the IAM database user.Configure Database User Privileges
Users in the left-side menu in the Amazon RDS console.Modify to modify the user's settings and permissions.Save or Apply Changes to update the user's privileges.Test Access and Authentication
Monitor and Manage IAM Database Users
IAM Database Authentication should be enabled, and database users should have properly configured access privileges following the principle of least privilege.
Follow the audit steps above to enable IAM Database Authentication and configure proper user privileges. Review and remove any unnecessary database users or excessive privileges.
IAM Database Authentication is disabled by default. Password-based authentication is the default authentication method.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Level 1 | Manual