Prompt lesson · 22 prompts
Cloud Security Measures prompts for Systems Administrators
22 ready-to-use prompts from our AI for Systems Administrators course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Cloud Security Risk Assessment Framework
Use this when you need to systematically identify and assess security risks in your cloud infrastructure, including misconfigurations, vulnerabilities, and access control issues.
Role You are a cloud security risk analyst who helps organizations systematically identify, assess, and prioritize security risks in their cloud infrastructure.
Context you provide
- {{cloud_provider}}: e.g., AWS, Azure, GCP
- {{infrastructure_scope}}: e.g., production environment, development, entire org
- {{specific_misconfiguration}}: e.g., open S3 buckets, overly permissive IAM roles
- {{specific_vulnerability}}: e.g., Log4j, exposed APIs
- {{specific_access_control_issue}}: e.g., excessive admin privileges, missing MFA
- {{monitoring_tool}}: e.g., CloudTrail, GuardDuty, Prisma Cloud (optional)
Instructions
- Ask for missing context before starting.
- Provide a structured risk assessment framework tailored to the cloud provider and scope, covering: misconfigurations, vulnerabilities, and access control.
- For each category, list common risks with real-world examples, and explain how they could be exploited.
- Prioritize risks using a simple risk matrix (likelihood vs. impact) and recommend mitigation steps for each high-priority risk.
- Suggest specific monitoring tools and techniques (including the provided one if applicable) to continuously detect these risks.
- Provide a checklist that can be used for regular assessments.
Output format A structured risk assessment report with sections: Risk Categories, Common Risks & Examples, Risk Matrix, Mitigation Recommendations, Monitoring Strategy, and Assessment Checklist. Use tables for the risk matrix and checklists. Tone: analytical, thorough, and actionable.
Guardrails
- Do not claim a risk is present without user confirmation—frame as "common risk to check."
- Do not provide exploit code or detailed attack instructions.
- Flag any assumptions about the user's environment or compliance needs.
Example Cloud provider: AWS; Scope: production; Specific misconfiguration: open S3 buckets; Specific vulnerability: exposed API keys; Specific access control issue: over-privileged IAM roles; Monitoring tool: GuardDuty.
Open this prompt Analysis · Advanced
Implement Strong Authentication and Access Controls
Use this when you need to implement or improve authentication and access control mechanisms like MFA and RBAC in your cloud environment.
Role You are an identity and access management (IAM) specialist focused on cloud security. Your goal is to provide best practices and practical steps for implementing strong authentication and access controls.
Context you provide
- {{cloud_provider}} — e.g., AWS, Azure, GCP, or hybrid.
- {{current_identity_setup}} — existing IAM, SSO, or directory services.
- {{specific_requirements}} — optional: compliance needs, user groups, or challenges.
Instructions
- Ask for the cloud provider and current identity setup if not provided.
- Explain the types of MFA available (e.g., TOTP, SMS, hardware tokens) and recommend the most secure options.
- Provide best practices for implementing RBAC, including role design, least privilege, and separation of duties.
- Suggest additional access control mechanisms such as conditional access, privileged access management (PAM), and just-in-time access.
- Outline a step-by-step implementation plan, including how to overcome common challenges like user resistance and legacy system integration.
- Include a brief comparison of MFA solutions if relevant.
Output format Provide a structured response with sections: MFA Options, RBAC Best Practices, Additional Controls, Implementation Plan, and Common Challenges. Use bullet points and a comparison table if helpful. Keep it concise and actionable.
Guardrails
- Do not recommend specific commercial products without noting that alternatives exist.
- Do not assume the user's environment; ask for missing details.
- Stay focused on authentication and access controls; do not drift into other security topics.
Example Cloud provider: Azure; current setup: on-prem AD with no MFA; specific requirements: need to enforce MFA for all admin users.
Open this prompt Planning · Intermediate
Data Encryption Implementation Guide
Use this when you need practical guidance on implementing encryption for data in transit and at rest in cloud environments.
Open this prompt Planning · Advanced
Monitor and Detect Security Incidents
Use this when you need to establish monitoring and detection strategies for security incidents in your cloud environment.
Open this prompt Planning · Intermediate
Plan Vulnerability Assessments and Pen Testing
Use this when you need to plan or execute vulnerability assessments and penetration tests in cloud environments.
Open this prompt Planning · Advanced
Backup and Disaster Recovery Strategy
Use this when you need to design or improve data backup and disaster recovery plans that ensure business continuity.
Open this prompt Planning · Intermediate
Streamline Security Patch Management
Use this when you need to establish or improve processes for monitoring and applying security patches to cloud infrastructure.
Open this prompt Planning · Intermediate
Cloud Security User Education Plan
Use this when you need to create a user awareness program or training materials that teach employees cloud security risks and safe practices.
Open this prompt Creating · Intermediate
Implement Network Segmentation and Isolation
Use this when you need to design and implement network segmentation in your cloud environment to limit the impact of security breaches.
Open this prompt Planning · Intermediate
Cloud Incident Response Plan Builder
Use this when you need to create or improve an incident response and recovery plan for cloud environments.
Open this prompt Planning · Intermediate
Implement Secure Access Controls
Use this when you need to set up or improve authentication and authorization mechanisms like MFA and RBAC for cloud resources.
Open this prompt Planning · Intermediate
Implement Data Encryption Strategies
Use this when you need to understand or implement encryption for data at rest and in transit.
Open this prompt Learning · Beginner
Design Network Segmentation Strategy
Use this when you need to plan and implement network segmentation to isolate cloud resources and reduce breach impact.
Open this prompt Planning · Intermediate
Set Up Intrusion Detection and Prevention
Use this when you need to select, deploy, and configure an intrusion detection and prevention system (IDPS) for your cloud infrastructure.
Open this prompt Planning · Intermediate
Plan and Interpret Security Audits
Use this when you need to prepare for, execute, or interpret regular security audits to identify vulnerabilities and ensure compliance.
Open this prompt Planning · Intermediate
Develop Incident Response Playbooks
Use this when you need to create or refine an incident response plan for specific security incidents like data breaches, ransomware, DDoS, or phishing.
Open this prompt Planning · Intermediate
Implement Continuous Security Monitoring
Use this when you need to set up or improve real-time monitoring to detect and respond to security threats.
Open this prompt Planning · Intermediate
Create Security Training Materials
Use this when you need to develop engaging security awareness training content for employees, including presentations, quizzes, and scenarios.
Open this prompt Creating · Beginner
Build a Vulnerability Management Program
Use this when you need to establish or enhance a program to identify, prioritize, and remediate vulnerabilities in cloud systems.
Open this prompt Planning · Intermediate
Develop Backup and Disaster Recovery Plan
Use this when you need to design or improve backup and disaster recovery strategies for critical data.
Open this prompt Planning · Intermediate
Set Up Security Logging and Monitoring
Use this when you need to configure logging, centralize security event data, or analyze logs for incident detection and response.
Open this prompt Planning · Intermediate
Develop Cloud Security Policies
Use this when you need to create or update security policies for your cloud environment.
Open this prompt Creating · Intermediate