https://imsj-blog.pages.dev/tags/iam/Recent content in Iam on imsjHugoenSun, 09 Aug 2026 00:00:00 +0000https://imsj-blog.pages.dev/posts/aws-cli-security-billing-scan/Sun, 09 Aug 2026 00:00:00 +0000https://imsj-blog.pages.dev/posts/aws-cli-security-billing-scan/<figure><img src="https://imsj-blog.pages.dev/posts/aws-cli-security-billing-scan/aws-cli-security-scan.png" alt="Example output of a quick AWS security and billing scan, with account-specific details redacted"><figcaption> <p>A scan&rsquo;s triaged output: critical items to fix now, then hygiene to configure later. Account-specific details are redacted.</p> </figcaption> </figure> <h2 id="one-prompt-not-a-runbook">One prompt, not a runbook</h2> <p>I am getting lazy. I wanted a fast read-only sanity-check on my old AWS account. I didn&rsquo;t sit there typing <code>aws</code> commands. I gave Claude Code one prompt and let it run the read-only calls itself.</p>