@aws

aws-amplify gen2 covers code-first full-stack development with typescript backends, multi-framework frontend integration (react, next.js, vue, angular, react native, flutter, swift, android), and deployment workflows. routes users to modular references for auth, data, storage, functions, and ai features.

aws-cdk covers construct authoring, deployment workflows, and troubleshooting within the cdk ecosystem. includes critical guidance on cross-stack references, construct id changes, rollback failures, and resource deletion edge cases.

amazon-bedrock enables building generative ai applications with model invocation, knowledge base rag, agent creation, guardrails for content safety, and agentcore deployment. covers api landscape, critical quota/security constraints, and troubleshooting patterns.

aws-cloudformation covers template authoring with security-first defaults, pre-deployment validation patterns, and post-deployment troubleshooting. emphasizes untrusted template content handling and resource property verification against official docs.

setting-up-ec2-instance-profiles covers the full lifecycle of granting ec2 instances secure aws service access via iam roles and instance profiles, from permission scoping through credential verification.

exporting-rds-to-s3 covers snapshot identification, iam and kms setup, s3 bucket preparation, export task initiation, monitoring, and verification for parquet exports to s3. includes aurora-specific guidance and basic troubleshooting for identifier lookup.

connecting-vpcs-with-peering establishes private network connectivity between vpcs via peering, covering same-region, cross-region, and cross-account scenarios with route table and security group configuration.

creating-secrets-using-best-practices wraps AWS Secrets Manager operations with KMS encryption, rotation policies, and least-privilege IAM controls. covers four secret types and includes lifecycle management guardrails.

discovers cloudwatch log groups and searches for error patterns to identify application failure root causes. generates remediation recommendations based on stack trace and log analysis.

this skill provisions a complete aurora database cluster with instances, managing cluster creation, instance attachment, and password storage via secrets manager for mysql and postgresql engines.

routing-traffic-with-route53-and-cloudfront covers dns alias setup and certificate validation for cloudfront distributions, but the actual procedural steps are referenced externally and not provided in this file.

aws-iam documents frequent ai agent errors in iam policy evaluation and trust policies, with pointers to reference material for role creation and least-privilege policy generation. incomplete coverage and truncated edge case section limit utility.

debugging-lambda-timeouts provides a systematic approach to investigating aws lambda timeout failures by collecting configuration, logs, metrics, and analyzing cold start patterns and code for common timeout causes.

finding-data-lake-assets resolves references to catalog entries across glue, s3, s3-tables, and redshift with token-efficient lookups. design emphasizes rapid resolution for downstream skills and direct queries.

querying-data-lake executes sql queries on amazon athena with workgroup selection and federated catalog support, including statement classification and cost reporting via aws mcp server or cli.

connecting-lambda-to-dynamodb documents iam role setup and event source mapping for lambda-dynamodb integration, but defers the actual procedure to external reference.

enabling-lambda-vpc-internet-access documents nat gateway setup for lambda functions in private vpc subnets, covering routing configuration and basic troubleshooting for connectivity failures.

aws-transform executes code upgrades and migrations via atx cli in local or remote modes, supporting language version bumps, sdk migrations, and custom transformations across multiple repositories.

aws-containers maps container deployment patterns to ecs, fargate, and ecr with decision trees for http apps, workers, batch jobs, and gpu workloads. lacks detailed procedures and failure handling.

aws-billing-and-cost-management covers cost analysis, budget setup, savings plan evaluation, and resource right-sizing across ec2/lambda/rds/ebs. lacks procedural depth and failure-mode handling.

ingesting-into-data-lake covers moving data from external sources into aws data lake tables, defaulting to s3 tables with fallback guidance for iceberg. assumes upstream connectivity exists and delegates connection setup elsewhere.

aws-sdk-js-v3-usage documents package structure and import conventions for the aws sdk javascript v3, covering client organization and module resolution patterns.

troubleshooting-s3-files addresses mount failures, iam permissions, sync issues, and performance problems in amazon s3 file operations, starting with dependency verification and credential validation.

aws-observability covers enabling services in cloudwatch, x-ray, and adot across ec2, ecs, eks, and lambda runtimes. instrumentation guidance and configuration validation included, though procedures remain high-level.

aws-serverless provides domain knowledge for lambda, api gateway, step functions, and eventbridge on aws. skeletons of specialized sub-skills exist but no actual procedures are present.

exploring-data-catalog maps aws data landscapes across glue, s3 tables, and iceberg catalogs with region-scoped read-only browsing and optional search filters.

aws-sdk-swift-usage documents async patterns for swift sdk clients with a single code example and deprecation warning, lacking depth on actual service operations or configuration mechanics.

storing-and-querying-vectors covers decision criteria for s3 vectors vs alternatives like openserarch, but lacks concrete procedural steps for actual implementation.

incomplete troubleshooting framework for amazon efs issues covering mount failures, nfs connectivity, and permissions, but lacks concrete procedures and decision logic.

Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and…

Creates a complete EC2 Image Builder pipeline that builds a custom AMI with pre-installed software, distributes it to target regions, executes the pipeline,…

Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and…

Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications — it creates…

Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use when…

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security…

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3,…

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration,…

Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management. Sets up table bucket,…

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user…

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers…

Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon…

AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore. This…

Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation…

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch…