security-hardening

SKILL.md

Proactive reduction of attack surface across infrastructure layers through systematic configuration hardening, least-privilege enforcement, and automated security controls. Applies industry-standard CIS Benchmarks and zero-trust principles to operating systems, containers, cloud configurations, networks, and databases.

Default Deny, Explicit Allow Start with all access denied, explicitly permit only required operations. Apply default-deny firewall rules and network policies, then allow specific traffic.

Least Privilege Access Grant minimum permissions required for operation. Use RBAC, IAM policies with specific resources, and database roles with limited permissions (no DELETE or DDL unless required).

CIS 벤치마크 및 제로 트러스트 원칙을 사용하여 OS, 컨테이너, 클라우드, 네트워크 및 데이터베이스 계층 전반에서 공격 표면을 줄입니다. 프로덕션 인프라를 강화하거나, 규정 준수 요구 사항을 충족하거나, 심층 방어 보안을 구현할 때 사용하세요. 출처: ancoleman/ai-design-components.

원본 보기