Menu
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-aws-database-4-2La commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Affichage de SKILL.md
Basé sur la classification professionnelle SOC
| name | cis-aws-database-4.2 |
| description | Ensure Fine-Grained Access Control is implemented |
| category | cis-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","aws","database","dynamodb","iam","fgac","access-control"] |
| cis_id | 4.2 |
| cis_benchmark | CIS AWS Database Services Benchmark v2.0.0 |
| tech_stack | ["aws"] |
| cwe_ids | [] |
| chains_with | ["cis-aws-database-4.1"] |
| prerequisites | [] |
| severity_boost | {} |
Fine-Grained Access Control (FGAC) on Amazon DynamoDB allows you to control access to data at the row level. Using IAM policies, you can restrict access based on the content within the request. Here is how you can implement FGAC:
Fine-Grained access control helps users to create and allow specific permission within that DB.
N/A
Create an IAM Role
Roles and select Create role.AWS service as the type of trusted entity.DynamoDB as the service that will use this role, then click Next: Permissions.Attach permissions policies page, choose Next: Tags. You do not need to attach a policy to this role yet.Add tags page, choose Next: Review.Review page, for Role name, enter a name for your role, such as DynamoDBFineGrainedAccessRole.Create role.Create an IAM Policy for Fine-Grained Access Control
Policies and select Create policy.JSON tab.us-west-2, 123456789012, myddbtable, HK, and RANGEK with your own values:{
"Version": "2012-10-17",
"Statement": [
{
"Effect"
In this policy:
dynamodb:LeadingKeys restrict access to only the items where the hash key value is the same as the user's ID.dynamodb:Attributes restrict access to only the "HK" and "RANGEK" attributes of the items.dynamodb:Select only allows the SPECIFIC_ATTRIBUTES operator.Next: Tags, add any tags if needed, and then choose Next: Review.Name, enter a name for your policy, such as DynamoDBFineGrainedAccessPolicy.Create policy.Roles.Permissions tab, choose Attach policies.Filter policies search box, enter the policy name you created before.Attach policy.Note: Fine-grained access control is a powerful feature but can be complex to configure. Be sure to test your setup to ensure it works as expected thoroughly.
Fine-Grained Access Control policies are in place restricting DynamoDB access at the row level based on user identity.
Follow the same steps as the audit procedure to create IAM roles and policies for Fine-Grained Access Control.
By default, Fine-Grained Access Control is not implemented. IAM policies grant table-level access.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Level 1 | Manual