mcpField
N
network-security-groups

network-security-groups

github.com/aj-geddesSecurity373443 installsUpdated 34w ago
Repository

About network-security-groups

A skill for designing network security groups and firewall rules to restrict access and segment infrastructure. It provides guidance and reference implementations for AWS, Kubernetes, and GCP scenarios.

Key features

  1. 01Least-privilege firewall rules
  2. 02Inbound and outbound traffic control
  3. 03Network segmentation guidance
  4. 04AWS, Kubernetes, and GCP references
  5. 05Rule auditing and documentation practices

Use cases

  1. 01Restrict database access
  2. 02Control VPN connectivity
  3. 03Secure multi-tier applications
  4. 04Plan zero-trust network access

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill network-security-groups

After installing, type/network-security-groupsin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
aws-security-groups.md
gcp-firewall-rules.md
kubernetes-network-policies.md
security-group-management-script.md
scripts/
security-checklist.sh

Details

From the project README

Network Security Groups

Table of Contents

Overview

Implement network security groups and firewall rules to enforce least privilege access, segment networks, and protect infrastructure from unauthorized access.

When to Use

  • Inbound traffic control
  • Outbound traffic filtering
  • Network segmentation
  • Zero-trust networking
  • DDoS mitigation
  • Database access restriction
  • VPN access control
  • Multi-tier application security

Quick Start

Minimal working example:

# aws-security-groups.yaml
Resources:
  # VPC Security Group
  VPCSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: VPC security group
      VpcId: vpc-12345678
      SecurityGroupIngress:
        # Allow HTTP from anywhere
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
          Description: "HTTP from anywhere"

        # Allow HTTPS from anywhere
        - IpProtocol: tcp
          FromPort: 443
          ToPort: 443
          CidrIp: 0.0.0.0/0
          Description: "HTTPS from anywhere"

        # Allow SSH from admin network only
        - IpProtocol: tcp
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

GuideContents
AWS Security GroupsAWS Security Groups
Kubernetes Network PoliciesKubernetes Network Policies
GCP Firewall RulesGCP Firewall Rules
Security Group Management ScriptSecurity Group Management Script

Best Practices

✅ DO
  • Implement least privilege access
  • Use security groups for segmentation
  • Document rule purposes
  • Regularly audit rules
  • Separate inbound and outbound rules
  • Use security group references
  • Monitor rule changes
  • Test access before enabling
❌ DON'T
  • Allow 0.0.0.0/0 for databases
  • Open all ports unnecessarily
  • Mix environments in single SG
  • Ignore egress rules
  • Allow all protocols
  • Forget to document rules
  • Use single catch-all rule
  • Deploy without firewall

Comments

Markdown supported