A specialized read-only audit tool for evaluating AWS VPC architecture, security filtering, and connectivity configurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install aws-networking-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install aws-networking-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is AWS VPC Networking Security Audit?
The AWS VPC Networking Security Audit is a professional-grade assessment tool designed to evaluate the security posture and architectural integrity of Amazon Web Services networking environments. Unlike generic advice, this skill focuses on provider-specific constructs including VPC design, Security Groups, NACLs, and Transit Gateway topologies. It operates using read-only AWS CLI commands, ensuring that your infrastructure remains stable and unchanged during the evaluation process.
By leveraging this skill within the Openclaw Skills ecosystem, developers and security engineers can gain deep visibility into traffic observability via VPC Flow Logs and identify misconfigurations such as black-hole routes or overly permissive security rules. It is an essential asset for teams aiming to maintain high compliance standards and operational excellence in the cloud.
AWS VPC Networking Security Audit Use Cases
- Validating CIDR allocation and subnet tier layouts during VPC architecture design reviews.
- Conducting post-migration networking audits to verify connectivity and Route Table entries.
- Identifying overly permissive Security Group rules and default NACL exposures during security assessments.
- Diagnosing Transit Gateway route propagation failures and asymmetric routing in complex topologies.
- Documenting VPC segmentation and Flow Log retention for compliance preparation and audits.
- Identifying unused ENIs and unattached EIPs to assist in cost optimization reviews.
How AWS VPC Networking Security Audit Works
- Inventory Assessment: Enumerates all VPCs, subnets, and CIDR blocks in the target region to evaluate architectural design and AZ distribution.
- Security Filtering Audit: Analyzes stateful Security Group rules and stateless NACL rules for potential vulnerabilities or over-permissiveness.
- Connectivity Review: Evaluates inter-VPC and hybrid connectivity, including Transit Gateways, VPC Peering, and VPC Endpoints.
- Traffic Observability Analysis: Inspects VPC Flow Log configurations and analyzes reject patterns to detect scanning or internal misconfigurations.
- Routing Validation: Audits Route Tables for black-hole routes, NAT Gateway correctness, and longest prefix match precedence.
- Report Generation: Compiles findings into a structured report, highlighting critical risks and resource optimization opportunities.
AWS VPC Networking Security Audit Setup
To utilize this skill, ensure your environment meets the following requirements:
- AWS CLI v2: Must be installed and configured with valid credentials.
- IAM Permissions: Attach a read-only policy covering
ec2:Describe*andlogs:FilterLogEventsactions. - Identify Scope: Determine the specific VPC IDs and regions for the audit.
Verify your setup with the following command:
aws sts get-caller-identity
AWS VPC Networking Security Audit Data Schema & Taxonomy
The skill organizes audit findings into a structured taxonomy based on AWS networking components:
| Data Category | Key Metrics Tracked |
|---|---|
| VPC Metadata | CIDR blocks, DNS support settings, Tenancy status |
| Security Rules | Port 0.0.0.0/0 exposure, unused SGs, default SG usage |
| Connectivity | TGW propagation state, Peering status, Endpoint ENI placement |
| Observability | Flow Log capture scope (REJECT/ACCEPT), Reject rates |
| Routing | Black-hole routes, Main vs Custom RT associations |
| Optimization | Available IPs %, Unused ENIs, Unattached EIPs |
AWS VPC Networking Security Audit Advanced Features
- Multi-account auditing capabilities using AWS STS assume-role workflows.
- Cross-AZ traffic volume analysis to identify high-cost data transfer patterns.
- Deep correlation between Flow Log REJECT events and specific Security Group rule sets.
- Decision tree logic for determining the severity of security rule permissiveness.
- Automated identification of orphaned networking resources for immediate cost reduction.
SKILL.md
Loading
Related Openclaw Skills
Java Code Reviewer
A high-performance automated tool for generating structured Java code review reports from git diffs or source files.
YY Live Stream Assistant
An automated data extraction skill for organizing YY Live public information, anchor regulations, and platform activities.
eBay Review Checker
An advanced authenticity analyzer designed to detect fake reviews, time clustering, and feedback manipulation specifically for the eBay ecosystem.
UC Browser Data Assistant
A specialized automation skill for extracting public product data, version histories, and help documentation from UC Browser web properties.
API Gateway
A managed OAuth proxy that enables AI agents to interact with over 100 third-party APIs using a single Maton API key.
Campaign Planning
An expert framework for designing, executing, and optimizing marketing campaigns through standardized SOPs and data-driven insights.
Featured*
