Skip to content
Get packs

AWS Verified Access ZTNA Setup

Guides an agent through configuring AWS Verified Access for VPN-less zero trust access to internal apps

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

Once installed, the agent can walk you through setting up AWS Verified Access, a service that lets people reach internal company web apps without a VPN. Each request is checked against rules you write (in the Cedar policy language) that consider who the user is and whether their device looks healthy. The skill also includes Python helper scripts that use AWS's API to list existing Verified Access resources and generate Cedar policy text.

Great for

  • Cloud or security engineers replacing a VPN with zero trust access on AWS
  • Teams writing Cedar access policies for Verified Access groups
  • Students learning how zero trust network access is configured in AWS

Skip it if

  • Organizations not running workloads on AWS, since the skill is specific to Verified Access (the policies and commands would not apply)
  • Production changes made without review: the examples use placeholder IDs and an inline client secret, and the commands create real cloud resources that can expose internal apps if misconfigured

Try asking

  • “Set up an AWS Verified Access instance with an Okta identity trust provider and a CrowdStrike device trust provider”
  • “Write a Cedar policy that only allows members of the engineering group with a CrowdStrike score above 70”
  • “Generate a Verified Access endpoint configuration for an internal ALB-backed HR application”
  • “List my existing Verified Access instances and groups using the helper script”
Step-by-step guide: how to use AWS Verified Access ZTNA SetupInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    configuring-aws-verified-access-for-ztna.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip configuring-aws-verified-access-for-ztna.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip configuring-aws-verified-access-for-ztna.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review every generated aws CLI command and Terraform change in a test account before running it in production, since the commands create cloud resources
  • Keep OIDC client secrets out of shell history and documents; load them from a secrets manager instead of pasting the example values
  • Run the list scripts with read-only credentials first to see what already exists before creating new trust providers or groups

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.