deploying-cloud-deception-with-decoy-resources — Agent Skill 安装配置（SkillsMP）

{
  "id": "io.github.mukul975/Anthropic-Cybersecurity-Skills/deploying-cloud-deception-with-decoy-resources",
  "type": "skill",
  "version": "main",
  "displayName": "deploying-cloud-deception-with-decoy-resources",
  "description": "Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches them: canary IAM access keys, permission-less decoy users/roles/service principals, honey object-storage buckets, and decoy secrets in Secrets Manager / Key Vault / Secret Manager. Wires detection through CloudTrail + EventBridge, Azure Sentinel honeytoken watchlists + Defender, and GCP Cloud Audit Logs, so any use of a decoy is routed to the SOC with near-zero false positives. Use when protecting cloud accounts and data stores, when an org has only on-prem honeypots and needs cloud coverage, when seeding fake AWS keys to catch credential theft and code-leak exposure, or when detecting cloud reconnaissance and lateral movement. Keywords: cloud deception, canary token AWS, honey S3 bucket, decoy IAM credentials, CloudTrail alert, GuardDuty, Sentinel honeytoken, decoy secret, honey service account, cloud honeypot, breach detection.",
  "author": {
    "name": "mukul975",
    "url": "https://github.com/mukul975"
  },
  "repository": {
    "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
    "source": "github",
    "subfolder": "skills/deploying-cloud-deception-with-decoy-resources"
  },
  "homepage": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-deploying-cloud-deception-with-decoy-resources",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "mukul975/Anthropic-Cybersecurity-Skills@deploying-cloud-deception-with-decoy-resources",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "repo_stars:23613"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "mukul975-anthropic-cybersecurity-skills-skills-deploying-cloud-deception-with-decoy-resources-skill-md",
    "originalUrl": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-deploying-cloud-deception-with-decoy-resources",
    "isOfficial": false,
    "status": "active"
  }
}