cspm-aws-cis-benchmark

Assess AWS accounts against CIS AWS Foundations Benchmark v3.0. Runs 18 automated read-only checks across IAM, Storage, Logging, and Networking. Produces per-control pass/fail results with remediation commands. Use when the user mentions AWS CIS benchmark, cloud security posture, IAM hygiene audit, S3 public access check, or CloudTrail validation. Do NOT use for GCP, Azure, or on-prem; do NOT use this skill to remediate findings (it is assessment-only and has zero write permissions) — pair with iam-departures-remediation for IAM cleanup, or open a ticket in your remediation workflow for other findings.