@aws

aws-amplify gen2 covers code-first full-stack development with typescript backends, multi-framework frontend integration (react, next.js, vue, angular, react native, flutter, swift, android), and deployment workflows. routes users to modular references for auth, data, storage, functions, and ai features.

aws-cdk covers construct authoring, deployment workflows, and troubleshooting within the cdk ecosystem. includes critical guidance on cross-stack references, construct id changes, rollback failures, and resource deletion edge cases.

amazon-bedrock enables building generative ai applications with model invocation, knowledge base rag, agent creation, guardrails for content safety, and agentcore deployment. covers api landscape, critical quota/security constraints, and troubleshooting patterns.

aws-cloudformation covers template authoring with security-first defaults, pre-deployment validation patterns, and post-deployment troubleshooting. emphasizes untrusted template content handling and resource property verification against official docs.

setting-up-ec2-instance-profiles covers the full lifecycle of granting ec2 instances secure aws service access via iam roles and instance profiles, from permission scoping through credential verification.

exporting-rds-to-s3 covers snapshot identification, iam and kms setup, s3 bucket preparation, export task initiation, monitoring, and verification for parquet exports to s3. includes aurora-specific guidance and basic troubleshooting for identifier lookup.

discovers cloudwatch log groups and searches for error patterns to identify application failure root causes. generates remediation recommendations based on stack trace and log analysis.

this skill provisions a complete aurora database cluster with instances, managing cluster creation, instance attachment, and password storage via secrets manager for mysql and postgresql engines.

routing-traffic-with-route53-and-cloudfront covers dns alias setup and certificate validation for cloudfront distributions, but the actual procedural steps are referenced externally and not provided in this file.

enabling-lambda-vpc-internet-access documents nat gateway setup for lambda functions in private vpc subnets, covering routing configuration and basic troubleshooting for connectivity failures.

finding-data-lake-assets resolves references to catalog entries across glue, s3, s3-tables, and redshift with token-efficient lookups. design emphasizes rapid resolution for downstream skills and direct queries.

aws-transform executes code upgrades and migrations via atx cli in local or remote modes, supporting language version bumps, sdk migrations, and custom transformations across multiple repositories.

aws-containers maps container deployment patterns to ecs, fargate, and ecr with decision trees for http apps, workers, batch jobs, and gpu workloads. lacks detailed procedures and failure handling.

aws-billing-and-cost-management covers cost analysis, budget setup, savings plan evaluation, and resource right-sizing across ec2/lambda/rds/ebs. lacks procedural depth and failure-mode handling.

ingesting-into-data-lake covers moving data from external sources into aws data lake tables, defaulting to s3 tables with fallback guidance for iceberg. assumes upstream connectivity exists and delegates connection setup elsewhere.

troubleshooting-s3-files addresses mount failures, iam permissions, sync issues, and performance problems in amazon s3 file operations, starting with dependency verification and credential validation.

aws-sdk-js-v3-usage documents package structure and import conventions for the aws sdk javascript v3, covering client organization and module resolution patterns.

exploring-data-catalog maps aws data landscapes across glue, s3 tables, and iceberg catalogs with region-scoped read-only browsing and optional search filters.

aws-sdk-swift-usage documents async patterns for swift sdk clients with a single code example and deprecation warning, lacking depth on actual service operations or configuration mechanics.

storing-and-querying-vectors covers decision criteria for s3 vectors vs alternatives like openserarch, but lacks concrete procedural steps for actual implementation.

incomplete troubleshooting framework for amazon efs issues covering mount failures, nfs connectivity, and permissions, but lacks concrete procedures and decision logic.

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers…

Guides use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon Data…

AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore. This…

Builds, configures, debugs, and optimizes AWS observability with CloudWatch (Log Insights, Metrics, Alarms, Dashboards, EMF), X-Ray, CloudTrail, and ADOT (AWS…

Builds, deploys, manages, debugs, configures, and optimizes serverless applications on AWS using Lambda, API Gateway, Step Functions, EventBridge, and SAM/CDK.…

Verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits,…

Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and…

>

>-

Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and…

Creates a complete EC2 Image Builder pipeline that builds a custom AMI with pre-installed software, distributes it to target regions, executes the pipeline,…

Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use when…

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3,…

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security…

Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications — it creates…

Connects an AWS Lambda function to DynamoDB with IAM roles, stream event source mapping, and read/write permissions. Use when setting up Lambda-DynamoDB…

Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up dedicated KMS…

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch…

Establishes VPC peering connections between two VPCs for direct private network connectivity. Always use this skill when creating or managing VPC peering — it…

>-

debugging-lambda-timeouts — an installable skill for AI agents, published by aws/agent-toolkit-for-aws.

connecting-lambda-to-api-gateway — an installable skill for AI agents, published by aws/agent-toolkit-for-aws.