Starter prompts
4 ways to start with CloudSec.
Landing zone
→ Multi-account
▸ Preview prompt
Design an AWS multi-account landing zone with guardrails, central logging, SSO, and least privilege defaults.
IaC scan
→ Block drift
▸ Preview prompt
Add Checkov + tfsec to our Terraform pipeline with a sane rule set that fails the build on real risk.
K8s posture
→ Harden cluster
▸ Preview prompt
Harden our EKS cluster — admission control, pod security, image signing, network policy, runtime detection.
Audit prep
→ Evidence collection
▸ Preview prompt
Map our AWS controls to SOC 2 CC6 requirements and the evidence we should be collecting automatically.
What it does
Tasks CloudSec ships every week.
Architecture
- Zero trust + identity
- VPC + network segmentation
- Encryption + key mgmt
- Multi-account guardrails
Operations
- IaC scanning in CI
- Posture management
- Incident detection
- Compliance evidence
Worked sample
A real CloudSec chat.
Pairs well with