Automate AWS compliance evidence collection with 15 read-only checks for seamless GRC integration.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install auditclaw-aws
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install auditclaw-aws using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is AuditClaw AWS?
AuditClaw AWS is a robust companion skill for auditclaw-grc designed to automate the collection of compliance evidence directly from AWS environments. As part of the Openclaw Skills ecosystem, it executes 15 specialized read-only API checks across critical services such as S3, IAM, CloudTrail, and VPC. This skill is built with a security-first approach, requiring no write or delete permissions, ensuring that your cloud infrastructure remains untouched while you gather the data needed for SOC2, ISO 27001, or HIPAA audits.
By synthesizing complex cloud configurations into actionable evidence, AuditClaw AWS empowers developers and compliance officers to maintain a continuous audit posture. It maps technical findings directly to compliance controls and stores them in a centralized database, significantly reducing the manual effort involved in multi-cloud or large-scale AWS account management.
AuditClaw AWS Use Cases
- Automated evidence gathering for annual SOC2, ISO, or HIPAA compliance audits.
- Continuous monitoring of AWS security groups, IAM rotation policies, and S3 bucket encryption.
- Centralizing multi-service AWS configuration data into a single GRC database for reporting.
- Verifying the health and status of security services like GuardDuty and Security Hub across accounts.
How AuditClaw AWS Works
- The skill authenticates with the AWS account using standard credential chains such as environment variables, AWS CLI profiles, or IAM instance roles.
- Upon invocation, it executes a suite of 15 targeted read-only checks across 14 different AWS services.
- Each check captures specific metadata, such as encryption status, logging configurations, or MFA enforcement.
- The collected data is formatted into structured evidence items, including mapping to specific control IDs.
- The findings are then pushed to the shared Openclaw Skills GRC database located at ~/.openclaw/grc/compliance.sqlite for unified management.
AuditClaw AWS Setup
- Configure your AWS credentials using the standard CLI command:
aws configure
- Install the required Python dependencies for the skill:
pip install -r scripts/requirements.txt
- Create a custom IAM policy using the definition found in
scripts/iam-policy.jsonto ensure the skill has the necessary read-only permissions. - Attach the policy to an IAM user (e.g.,
auditclaw-scanner) and ensure you have access to the credentials. - Test the integration to ensure all services are reachable:
python3 scripts/aws_evidence.py --test-connection
AuditClaw AWS Data Schema & Taxonomy
Evidence collected by this skill is organized within the GRC database with the following metadata taxonomy:
| Attribute | Description |
|---|---|
| source | Hardcoded to "aws" to identify the evidence origin. |
| type | Set to "automated" to distinguish from manual uploads. |
| control_id | The specific compliance control (SOC2/ISO) the check satisfies. |
| description | A human-readable summary of the finding (e.g., "S3 Default Encryption Status"). |
| file_content | A full JSON payload containing the raw technical details of the AWS check. |
Data is stored locally in a SQLite schema to ensure privacy and offline accessibility for Openclaw Skills users.
AuditClaw AWS Advanced Features
- Targeted Scans: Run specific checks (e.g., just IAM or S3) to save time and reduce API calls.
- GRC Integration: Deeply integrated with the auditclaw-grc framework for end-to-end audit management.
- Security Hub Sync: Automatically pulls active findings and severity levels from AWS Security Hub.
- Principle of Least Privilege: Operates entirely on a custom, 43-action read-only policy rather than overly permissive managed roles.
- Multi-Service Coverage: Includes checks for modern serverless (Lambda) and containerized (EKS/ECS) environments.
SKILL.md
Loading
Related Openclaw Skills
WAL Memory
A robust two-file Write-Ahead Log system designed to prevent agent amnesia during session crashes or context compaction.
Playwright Browser Automation
A high-performance browser automation skill for executing custom Node.js Playwright scripts to scrape, test, and automate complex web workflows.
FFmpeg Video Editor
An intelligent command generator that translates natural language video editing requests into optimized FFmpeg execution strings.
envoic
A powerful utility for scanning, auditing, and purging stale Python virtual environments and node_modules to reclaim storage space.
AuditClaw Azure
A specialized tool for collecting read-only Azure compliance evidence and security findings for GRC workflows.
EduClaw Financial Aid
A comprehensive Title IV compliant financial aid management system for handling student awards, scholarships, and federal reporting.
METADATA
Featured*
