Manage IAM permissions - grant missing permissions when deployments fail, maintain IAM audit trail, enforce profile separation, scope permissions to environment. Uses discover-deploy profile to grant permissions, never grants to production without explicit approval.
Inherits all available tools
Additional assets for this skill
This skill inherits all available tools. When active, it can use any tool Claude has access to.
scripts/audit/apply-to-aws.shscripts/audit/diff-audit-aws.shscripts/audit/sync-from-aws.shscripts/audit/update-audit.shtemplates/iam-policies/README.mdtemplates/iam-policies/prod-deploy-permissions.jsontemplates/iam-policies/staging-deploy-permissions.jsontemplates/iam-policies/test-deploy-permissions.json