processing-s3-uploads-with-step-functions
What this skill does
Deploy an event-driven workflow that routes S3 uploads to either Lambda or Fargate via Step Functions based on file size. Uses EventBridge to trigger a Step Functions state machine when objects are up
github/aws - IAM Policy Misconfiguration - 2.3k stars
Threat analysis
Skill info
pkg:github/aws/agent-toolkit-for-aws@e2588f4?skill=processing-s3-uploads-with-step-functionsAssessments (3)
IAM Policy Misconfiguration
IAM Policy Misconfiguration via local-llm-review
references/iam-roles.md
The IAM role for Lambda has a policy that allows 's3:GetObject' on 'arn:aws:s3:::{bucket_name}/*'. This is overly permissive as it allows access to all objects in the bucket, which may not be intendedHardcoded Values
Hardcoded Values via local-llm-review
scripts/lambda_function.py
The code uses hardcoded values for file size limits (e.g., '512 * 1024 * 1024') which may not be configurable and could be a point of failure if requirements change.Resource Cleanup
Resource Cleanup via local-llm-review
scripts/lambda_function.py
The code attempts to clean up the downloaded file using 'os.remove(local_path)', but this is wrapped in a try-except block that silently ignores errors. This could lead to temporary files accumulatingBadge
Add the Anomity scan badge for processing-s3-uploads-with-step-functions to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of processing-s3-uploads-with-step-functions? Report an issue or request a rescan.
