Kiro CLIのHelp Agentを使ってみた

$ kiro-cli

> /help

5% > /help

Switching to the [help] agent.

Welcome to Kiro CLI Help!

I can answer questions about Kiro CLI and help you configure it:
• Slash commands (/agent, /context, /tools, etc.)
• Built-in tools (fs_read, code, grep, etc.)
• Configuration settings
• Features like MCP, Tangent Mode, Code Intelligence
• Create/modify agents, prompts, and LSP configs in .kiro/

Just ask me anything about Kiro CLI!
...
Tip: Use /help to return to your previous agent

> /help カスタムエージェントの作り方を教えて

> カスタムエージェントを作成する方法は2つあります:

## 1. AI支援による作成（推奨）
/agent create
対話形式でAIがエージェント設定を生成します。名前、説明、スコープ、MCPサーバーなどを順番に聞かれます。

## 2. 手動作成
/agent create my-agent --manual
エディタが開き、JSON設定を直接編集できます。

## 保存場所
- ワークスペース: .kiro/agents/<名前>.json
- グローバル: ~/.kiro/agents/<名前>.json
作成後は /agent swap <名前> で切り替えられます。

[help] 13% > /help
Switching to the [kiro_default] agent.
14% >

$ mkdir -p .kiro/agents

{
  "name": "security-reviewer",
  "description": "AWS環境のセキュリティレビューを実施するエージェント",
  "prompt": "あなたはAWSセキュリティの専門家です。IAMポリシー、ネットワーク設定、暗号化設定のレビューを行い、Well-Architected Frameworkのセキュリティ柱に基づいた改善提案を出してください。結果は「重大問題」「警告」「推奨事項」に分類してください。",
  "tools": [
    "fs_read",
    "grep",
    "glob"
  ],
  "allowedTools": [
    "fs_read",
    "grep",
    "glob"
  ],
  "toolsSettings": {
    "fs_read": {
      "allowedPaths": ["."]
    }
  }
}

# セキュリティレビューエージェント

## 役割
あなたはAWSセキュリティの専門家です。

## レビュー対象
1. IAMポリシー - Principal, Action, Resource, Conditionの構造、ワイルドカード使用、クロスアカウントアクセス
2. ネットワーク設定 - セキュリティグループ、NACL、VPC設定
3. 暗号化設定 - 保存時・転送時の暗号化
4. ログ・監視 - CloudTrail、CloudWatch、GuardDuty

## 出力形式
結果は以下の3カテゴリに分類して出力してください:

### 重大問題（Critical）
- セキュリティインシデントに直結する問題

### 警告（Warning）
- 改善が推奨される設定

### 推奨事項（Recommendation）
- ベストプラクティスに基づく改善提案

各項目には以下を含めてください:
- 問題の説明
- 影響範囲
- 修正方法（具体的なポリシー/設定例）
- 参考: AWS公式ドキュメントURL

{
  "name": "security-reviewer",
  "description": "AWS環境のセキュリティレビューを実施するエージェント",
  "prompt": "file://../prompts/security-review.md",
  "tools": [
    "fs_read",
    "grep",
    "glob",
    "@aws"
  ],
  "allowedTools": [
    "fs_read",
    "grep",
    "glob"
  ],
  "mcpServers": {
    "aws": {
      "command": "uvx",
      "args": ["awslabs.aws-api-mcp-server@latest"],
      "env": {
        "AWS_PROFILE": "your-profile-name",
        "AWS_REGION": "ap-northeast-1"
      }
    }
  }
}

{
  "hooks": {
    "postToolUse": [
      {
        "command": "echo \"$(date '+%Y-%m-%d %H:%M:%S') - Tool: $KIRO_TOOL_NAME\" >> .kiro/audit.log"
      }
    ]
  }
}

{
  "mcpServers": {
    "aws": {
      "command": "uvx",
      "args": ["awslabs.aws-api-mcp-server@latest"],
      "env": {
        "AWS_PROFILE": "your-profile-name",
        "AWS_REGION": "ap-northeast-1"
      }
    },
    "iam-policy-autopilot": {
      "command": "uvx",
      "args": ["iam-policy-autopilot", "mcp-server"],
      "env": {
        "AWS_PROFILE": "your-profile-name",
        "AWS_REGION": "ap-northeast-1"
      }
    }
  }
}

$ kiro-cli mcp add \
  --name iam-policy-autopilot \
  --command "uvx" \
  --args "iam-policy-autopilot","mcp-server"

> /agent swap security-reviewer

[security-reviewer] 1% > このプロジェクトのIAMポリシー定義をレビューして、最小権限の原則に基づいた改善提案をしてください。

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "FullS3Access",
      "Effect": "Allow",
      "Action": "s3:*",
      "Resource": "*"
    },
    {
      "Sid": "EC2Management",
      "Effect": "Allow",
      "Action": ["ec2:*", "iam:PassRole"],
      "Resource": "*"
    },
    {
      "Sid": "LogsAccess",
      "Effect": "Allow",
      "Action": ["logs:CreateLogGroup", "logs:CreateLogStream", "logs:PutLogEvents"],
      "Resource": "arn:aws:logs:*:*:*"
    }
  ]
}

{
  "mcpServers": {
    "security-scanner": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/aws-samples/sample-mcp-security-scanner.git@main",
        "security_scanner_mcp_server"
      ],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      },
      "autoApprove": [
        "scan_with_checkov",
        "scan_with_semgrep",
        "scan_with_bandit",
        "get_supported_formats"
      ]
    }
  }
}

resource "aws_s3_bucket" "insecure_bucket" {
  bucket = "my-insecure-bucket"
  acl    = "public-read"
}

resource "aws_security_group" "wide_open" {
  name = "wide-open-sg"

  ingress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

resource "aws_iam_role_policy" "overly_permissive" {
  name = "overly-permissive"
  role = aws_iam_role.example.id

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect   = "Allow"
        Action   = "*"
        Resource = "*"
      }
    ]
  })
}

> /agent swap security-reviewer
> このTerraformファイルをセキュリティスキャンして、問題点を教えてください: test/insecure.tf

resource "aws_s3_bucket" "secure_bucket" {
  bucket = "my-secure-bucket"
}

resource "aws_s3_bucket_public_access_block" "secure_bucket" {
  bucket = aws_s3_bucket.secure_bucket.id

  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

resource "aws_s3_bucket_server_side_encryption_configuration" "secure_bucket" {
  bucket = aws_s3_bucket.secure_bucket.id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}

resource "aws_security_group" "secure_sg" {
  name        = "secure-sg"
  description = "Secure security group with minimal access"

  ingress {
    description = "HTTPS from specific IP"
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["203.0.113.0/24"]
  }

  ingress {
    description = "SSH from bastion only"
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["10.0.1.0/24"]
  }

  egress {
    description = "Allow outbound traffic"
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

resource "aws_iam_role_policy" "least_privilege" {
  name = "least-privilege-policy"
  role = aws_iam_role.example.id

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = [
          "s3:GetObject",
          "s3:PutObject"
        ]
        Resource = "arn:aws:s3:::specific-bucket-name/*"
      },
      {
        Effect = "Allow"
        Action = [
          "dynamodb:GetItem",
          "dynamodb:PutItem"
        ]
        Resource = "arn:aws:dynamodb:ap-northeast-1:123456789012:table/specific-table"
      }
    ]
  })
}

> プロジェクト全体のセキュリティレビューを実施してください。
  IAMポリシー、IaC設定、アプリケーションコードを対象に、
  重大問題・警告・推奨事項に分類して報告してください。

> 検出された重大問題について、修正済みのTerraformコードを生成してください。

# ============================================
# S3バケット - セキュア設定
# ============================================

resource "aws_s3_bucket" "secure_bucket" {
  bucket = "my-secure-bucket"
}

resource "aws_s3_bucket_public_access_block" "secure_bucket" {
  bucket = aws_s3_bucket.secure_bucket.id

  block_public_acls       = true
  block_public_policy     = true
  ignore_public_acls      = true
  restrict_public_buckets = true
}

resource "aws_s3_bucket_server_side_encryption_configuration" "secure_bucket" {
  bucket = aws_s3_bucket.secure_bucket.id

  rule {
    apply_server_side_encryption_by_default {
      sse_algorithm = "AES256"
    }
  }
}

resource "aws_s3_bucket_versioning" "secure_bucket" {
  bucket = aws_s3_bucket.secure_bucket.id

  versioning_configuration {
    status = "Enabled"
  }
}

# ============================================
# セキュリティグループ - 最小権限設定
# ============================================

resource "aws_security_group" "secure_sg" {
  name        = "secure-sg"
  description = "Security group with least privilege access"

  ingress {
    description = "HTTPS from specific IP range"
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["203.0.113.0/24"]
  }

  ingress {
    description = "SSH from internal network only"
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["10.0.1.0/24"]
  }

  egress {
    description = "Allow HTTPS outbound"
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name        = "secure-sg"
    Environment = "production"
  }
}

# ============================================
# IAMポリシー - 最小権限の原則
# ============================================

resource "aws_iam_role_policy" "least_privilege" {
  name = "least-privilege-policy"
  role = aws_iam_role.example.id

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Sid    = "S3ReadWrite"
        Effect = "Allow"
        Action = [
          "s3:GetObject",
          "s3:PutObject",
          "s3:ListBucket"
        ]
        Resource = [
          "arn:aws:s3:::my-secure-bucket",
          "arn:aws:s3:::my-secure-bucket/*"
        ]
      },
      {
        Sid    = "CloudWatchLogs"
        Effect = "Allow"
        Action = [
          "logs:CreateLogGroup",
          "logs:CreateLogStream",
          "logs:PutLogEvents"
        ]
        Resource = "arn:aws:logs:*:*:log-group:/aws/*"
      }
    ]
  })
}