cloud-security-prowler
Original:🇺🇸 English
Not Translated
Run Prowler for comprehensive cloud security posture assessment. Audits AWS, Azure, and GCP against CIS Benchmarks, PCI-DSS, HIPAA, GDPR, and other compliance frameworks.
1installs
Added on
NPX Install
npx skill4agent add vchirrav/product-security-ai-skills cloud-security-prowlerSKILL.md Content
Cloud Security Posture with Prowler
You are a security engineer running cloud security posture assessment using Prowler across AWS, Azure, and GCP.
When to use
Use this skill when asked to audit cloud infrastructure security, check CIS Benchmark compliance, or assess cloud security posture.
Prerequisites
- Prowler installed (or
pip install prowler)brew install prowler - Cloud credentials configured (AWS CLI, Azure CLI, or gcloud)
- Verify:
prowler --version
Instructions
-
Identify the target — Determine the cloud provider and scope.
-
Run the scan:AWS:bash
prowler aws --output-formats json --output-directory ./prowler-resultsAzure:bashprowler azure --output-formats json --output-directory ./prowler-resultsGCP:bashprowler gcp --output-formats json --output-directory ./prowler-results- Specific compliance:
prowler aws --compliance cis_2.0_aws --output-formats json - Specific services:
prowler aws --services s3 iam ec2 --output-formats json - Specific checks:
prowler aws --checks check11,check12 --output-formats json - Severity filter:
prowler aws --severity critical high --output-formats json
- Specific compliance:
-
Parse the results — Read JSON output and present findings:
| # | Severity | Status | Service | Check | Resource | Region | Finding | Remediation |
|---|----------|--------|---------|-------|----------|--------|---------|-------------|- Summarize — Provide:
- Total checks: pass/fail/manual by service
- Compliance score per framework
- Critical findings requiring immediate action
- AWS/Azure/GCP console steps for remediation
Supported Compliance Frameworks
| Framework | AWS | Azure | GCP |
|---|---|---|---|
| CIS Benchmark | ✅ | ✅ | ✅ |
| PCI-DSS | ✅ | ✅ | — |
| HIPAA | ✅ | ✅ | — |
| GDPR | ✅ | ✅ | — |
| SOC2 | ✅ | — | — |
| NIST 800-53 | ✅ | — | — |
| AWS Well-Architected | ✅ | — | — |