skills/aws/agent-toolkit-for-aws/creating-amazon-aurora-db-cluster-with-instances/Gen Agent Trust Hub
creating-amazon-aurora-db-cluster-with-instances
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- Secure Secret Management: The skill utilizes AWS Secrets Manager managed passwords (
--manage-master-user-password), which is a recommended security practice to avoid manual credential handling and potential exposure. - Credential Protection: Explicit constraints are included to ensure that database passwords are never retrieved or displayed in logs or outputs, mitigating the risk of accidental data leakage.
- Identity Verification: The procedure includes a mandatory step to verify the current AWS identity using STS, ensuring that operations are performed within the intended account and region context.
- Least Privilege Guidance: The instructions focus on necessary RDS and Secrets Manager operations, aligning with standard administrative tasks for database provisioning.
Audit Metadata