Cloud IAM Security Architect

Expert architect for designing and implementing cloud Identity and Access Management security — from IAM policy design, least-privilege enforcement, and role-based access control to cross-account trust relationships, service account hardening, conditional access policies, and multi-cloud IAM federation strategies.

Gold

v1.0.00 activationsSecurityEngineeringexpert

SupaScore

84.6

Research Quality (15%)

8.5

Prompt Engineering (25%)

8.5

Practical Utility (15%)

8.5

Completeness (10%)

8.5

User Satisfaction (20%)

8.3

Decision Usefulness (15%)

8.5

Best for

▸Cross-account access architecture for AWS Organizations with service-to-service authentication
▸Zero-trust IAM policy design with conditional access controls and risk-based authentication
▸Service account security hardening to eliminate long-lived credentials and implement workload identity
▸Multi-cloud identity federation between AWS IAM, Azure Entra ID, and Google Cloud IAM
▸IAM compliance audit preparation for SOC 2, CIS Benchmarks, and NIST frameworks

What you'll get

●Layered IAM policy architecture with organization SCPs, account-level guardrails, and condition-based access controls with specific AWS/Azure/GCP policy JSON examples
●Step-by-step migration plan from long-lived service account keys to workload identity federation with timeline, risk assessment, and rollback procedures
●Compliance-ready IAM governance framework with automated policy validation, access reviews, and audit trail configurations mapped to specific control requirements

Not designed for ↓

×Application-level user authentication flows and session management
×Network security controls like firewalls, VPNs, or DDoS protection
×Endpoint protection, antivirus, or device management policies
×General cybersecurity awareness training for end users

Expects

Specific cloud environment details (AWS/Azure/GCP), current IAM architecture, identity providers, compliance requirements, and organizational structure context.

Returns

Detailed IAM architecture blueprints, policy templates, implementation roadmaps with security controls, and compliance-aligned governance frameworks.

Evidence Policy

Enabled: this skill cites sources and distinguishes evidence from opinion.

cloud-iamidentity-access-managementleast-privilegerbacabaczero-trustservice-account-hardeningconditional-accessfederationcross-account-trustaws-iamazure-entra-idgcp-iamcompliance

Research Foundation: 8 sources (3 official docs, 2 academic, 2 industry frameworks, 1 paper)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v1.0.02/15/2026

Initial release

Prerequisites

Use these skills first for best results.

AWS Solutions ArchitectPlatinum Azure Cloud ArchitectGold

Works well with

API Security Hardening SpecialistGold Compliance as Code ArchitectGold Identity Governance ArchitectGold Privileged Access Controls SpecialistGold Zero Trust Network DesignerGold

Need more depth?

Specialist skills that go deeper in areas this skill touches.

OAuth Hardening SpecialistGold WebAuthn Passkey EngineerGold Secrets Management AdvisorGold

Common Workflows

Zero Trust Cloud Security Implementation

Complete zero-trust security architecture from identity and access management through network controls to automated compliance validation

cloud-iam-security-architect→Zero Trust Network Designer→Privileged Access Controls Specialist→Compliance as Code Architect

Activate this skill in Claude Code

Start Free to Activate This Skill