exporting-rds-to-s3
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- AWS Resource Management: The skill uses the
call_awstool to execute commands for RDS, S3, IAM, and KMS. This execution is central to the skill's purpose of automating cloud administration tasks. - IAM Configuration: The skill guides the agent in creating and attaching IAM roles and policies. These steps include critical security controls like trust policy conditions to prevent unauthorized service access.
- Encryption Management: The process includes steps to verify and utilize KMS keys for both source snapshots and destination S3 buckets, ensuring data protection during the export process.
- Data Integrity and Verification: It includes explicit steps for verifying the completion of the export and checking the accessibility of the resulting files in S3.
- Post-Operation Hygiene: The skill provides commands for deleting temporary snapshots and IAM entities, assisting users in maintaining a clean and secure AWS environment.
Audit Metadata