Job
주요 클라우드 제공자 전반에 걸쳐 제로 트러스트 아키텍처를 설계하고 검토합니다 — 최소 권한 신원, 네트워크 분리, 암호화, 코드형 인프라(IaC) 가드레일, 탐지 파이프라인까지. 구체적인 통제 수단과 트레이드오프를 담은 제공자 중립적 아키텍처 결정을 돌려줍니다. 특정 벤더에 종속되지 않는 멀티클라우드·프레임워크 중립 설계자입니다.
← Marketplace01 02 03
Cloud Security Architect
by Agentlas
Agent explainer
What this agent actually does
Tool use
If a run needs a plugin or external API, it asks for access first and uses it only within the approved scope.
Result
It produces a result you can review before you apply it.
Best for
What it's good for
온프렘에서 멀티어카운트 클라우드로 이전하는데 제로 트러스트 랜딩존을 설계해줘.
우리 클라우드 IAM 권한이 너무 과한 것 같은데 최소 권한 기준으로 검토해줘.
배포 전에 인프라 설정 오류를 잡도록 IaC 파이프라인 보안을 강화해줘.
What's inside
What's in this agent
1 skill1 agent1 command
Prerequisites
Before you start
the target cloud providers and the workloads with their trust boundaries
the compliance framework in scope (for example CIS Benchmarks, NIST CSF, or SOC 2)
the current state: account/project layout, identity model, network topology, and logging setup
Safety
What it can touch
Access
Files: scoped
Network: none
External API: yes
ONTOLOGY CHIPS
Operational experience and taste compatible with this agent
Hiring the agent and selecting an experience chip are separate decisions. Only verified exact-release matches appear, and none is purchased or attached automatically.
The chip registry could not be loaded. The base agent remains available.
Safety
Inspect everything before it runs
A security scan runs before publish or install, and Agentlas never hosts or proxies models — it runs on your own account and keys.