@aws

aws-amplify gen2 covers code-first full-stack development with typescript backends, multi-framework frontend integration (react, next.js, vue, angular, react native, flutter, swift, android), and deployment workflows. routes users to modular references for auth, data, storage, functions, and ai features.

aws-cdk covers construct authoring, deployment workflows, and troubleshooting within the cdk ecosystem. includes critical guidance on cross-stack references, construct id changes, rollback failures, and resource deletion edge cases.

amazon-bedrock enables building generative ai applications with model invocation, knowledge base rag, agent creation, guardrails for content safety, and agentcore deployment. covers api landscape, critical quota/security constraints, and troubleshooting patterns.

aws-cloudformation covers template authoring with security-first defaults, pre-deployment validation patterns, and post-deployment troubleshooting. emphasizes untrusted template content handling and resource property verification against official docs.

setting-up-ec2-instance-profiles covers the full lifecycle of granting ec2 instances secure aws service access via iam roles and instance profiles, from permission scoping through credential verification.

exporting-rds-to-s3 covers snapshot identification, iam and kms setup, s3 bucket preparation, export task initiation, monitoring, and verification for parquet exports to s3. includes aurora-specific guidance and basic troubleshooting for identifier lookup.

creating-secrets-using-best-practices wraps AWS Secrets Manager operations with KMS encryption, rotation policies, and least-privilege IAM controls. covers four secret types and includes lifecycle management guardrails.

connecting-vpcs-with-peering establishes private network connectivity between vpcs via peering, covering same-region, cross-region, and cross-account scenarios with route table and security group configuration.

discovers cloudwatch log groups and searches for error patterns to identify application failure root causes. generates remediation recommendations based on stack trace and log analysis.

this skill provisions a complete aurora database cluster with instances, managing cluster creation, instance attachment, and password storage via secrets manager for mysql and postgresql engines.

routing-traffic-with-route53-and-cloudfront covers dns alias setup and certificate validation for cloudfront distributions, but the actual procedural steps are referenced externally and not provided in this file.

aws-iam documents frequent ai agent errors in iam policy evaluation and trust policies, with pointers to reference material for role creation and least-privilege policy generation. incomplete coverage and truncated edge case section limit utility.

debugging-lambda-timeouts provides a systematic approach to investigating aws lambda timeout failures by collecting configuration, logs, metrics, and analyzing cold start patterns and code for common timeout causes.

querying-data-lake executes sql queries on amazon athena with workgroup selection and federated catalog support, including statement classification and cost reporting via aws mcp server or cli.

finding-data-lake-assets resolves references to catalog entries across glue, s3, s3-tables, and redshift with token-efficient lookups. design emphasizes rapid resolution for downstream skills and direct queries.

aws-transform executes code upgrades and migrations via atx cli in local or remote modes, supporting language version bumps, sdk migrations, and custom transformations across multiple repositories.

enabling-lambda-vpc-internet-access documents nat gateway setup for lambda functions in private vpc subnets, covering routing configuration and basic troubleshooting for connectivity failures.

connecting-lambda-to-dynamodb documents iam role setup and event source mapping for lambda-dynamodb integration, but defers the actual procedure to external reference.

aws-containers maps container deployment patterns to ecs, fargate, and ecr with decision trees for http apps, workers, batch jobs, and gpu workloads. lacks detailed procedures and failure handling.

aws-billing-and-cost-management covers cost analysis, budget setup, savings plan evaluation, and resource right-sizing across ec2/lambda/rds/ebs. lacks procedural depth and failure-mode handling.

ingesting-into-data-lake covers moving data from external sources into aws data lake tables, defaulting to s3 tables with fallback guidance for iceberg. assumes upstream connectivity exists and delegates connection setup elsewhere.

aws-sdk-js-v3-usage documents package structure and import conventions for the aws sdk javascript v3, covering client organization and module resolution patterns.

troubleshooting-s3-files addresses mount failures, iam permissions, sync issues, and performance problems in amazon s3 file operations, starting with dependency verification and credential validation.

aws-serverless provides domain knowledge for lambda, api gateway, step functions, and eventbridge on aws. skeletons of specialized sub-skills exist but no actual procedures are present.

aws-observability covers enabling services in cloudwatch, x-ray, and adot across ec2, ecs, eks, and lambda runtimes. instrumentation guidance and configuration validation included, though procedures remain high-level.

exploring-data-catalog maps aws data landscapes across glue, s3 tables, and iceberg catalogs with region-scoped read-only browsing and optional search filters.

aws-sdk-swift-usage documents async patterns for swift sdk clients with a single code example and deprecation warning, lacking depth on actual service operations or configuration mechanics.

storing-and-querying-vectors covers decision criteria for s3 vectors vs alternatives like openserarch, but lacks concrete procedural steps for actual implementation.

incomplete troubleshooting framework for amazon efs issues covering mount failures, nfs connectivity, and permissions, but lacks concrete procedures and decision logic.

Authors and edits AWS Step Functions state machines: writes Amazon States Language (ASL) in JSONata, and chooses and structures state types (Task, Choice, Map,…

Configures AWS Application Recovery Controller (ARC) for operational resilience: routing controls with safety rules for cross-Region failover, and zonal shift…

Configures AWS Resilience Hub v2 for multi-account resilience management across an AWS Organization. Covers the per-service cross-account permission model,…

Runs and interprets AWS Resilience Hub v2 failure mode assessments. Covers starting assessments, understanding findings (severity, categories,…

Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys, onboards services with input…

Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration, validation,…

Designs a resilience program: how to structure and standardize resilience policies across an organization, team, or portfolio (tiered policy model with…

Answers questions about Amazon Application Recovery Controller (ARC) Region switch including architecture, plans, execution blocks, workflows, triggers,…

Configures AWS Shield Advanced for enhanced Distributed Denial of Service (DDoS) protection: subscribing accounts and adding resource protections, enabling…

Configures AWS Direct Connect: choosing a connection model (dedicated, hosted, or a link aggregation group) and completing the cross connect; creating private,…

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC…

Configures AWS Transit Gateway: creating a hub and attaching VPCs, segmenting traffic with route tables, centralizing egress and inspection through a hub…

Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller. Covers the Define →…

Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers…

Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS…

Retrieves authoritative guidance on Amazon Timestream for InfluxDB across its supported engine variants. Applicable to any InfluxDB-on-AWS request including…

Configures Amazon Route 53 DNS: public and private records, traffic-steering routing policies, health checks, DNS Firewall, Route 53 Profiles, VPC Resolver…

Creates a complete EC2 Image Builder pipeline that builds a custom AMI with pre-installed software, distributes it to target regions, executes the pipeline,…

Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual private…

Diagnoses and resolves Amazon RDS for Oracle connectivity, authentication, networking, and driver troubleshooting. Applicable to any RDS-for-Oracle question…

Provides connectivity, authentication, and troubleshooting guidance for Amazon RDS for SQL Server. Applicable when users ask about SSMS times out connecting…

Migrates vibe-coded web applications to AWS. Handles the full workflow from analysis through migration to deployment, producing deployable AWS Blocks…

Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans,…

Handles the full DMS Schema Conversion lifecycle including creating migration projects, converting database schemas to a target engine, running compatibility…

Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual input),…

Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL, GovCloud),…

Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health. Covers agent installation, IAM…

Runs SQL analytics on SageMaker Catalog asset metadata tables exported as Apache Iceberg in S3 Tables. Covers governance queries, asset growth tracking,…

MANDATORY for Flink or Amazon Managed Service for Apache Flink (MSF) questions. You MUST activate this skill BEFORE answering — do not answer from training…

Provides authoritative compatibility checks, pricing estimates, connection troubleshooting, pre-warming guidance, and infrastructure mutations for Amazon…

Designs, reviews, and debugs DynamoDB data layers from design axioms — enumerates access patterns, chooses partition/sort keys and GSIs, decides single-table…

Deploy an event-driven workflow that routes S3 uploads to either Lambda or Fargate via Step Functions based on file size. Uses EventBridge to trigger a Step…

Advises on Amazon RDS open-source engines (MySQL, MariaDB, PostgreSQL) for instance creation, upgrade planning, commitment pricing, proxy evaluation, and…

Manages Amazon DocumentDB end-to-end — serverless-on-8.0 cluster setup, TLS/VPC/driver config, flexible-schema and vector-search data modeling, MongoDB…

Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI. Covers ACM certificate…

Operates Amazon MSK Provisioned clusters (Standard and Express brokers). Required for ANY MSK Provisioned task — training data conflates Standard and Express,…

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront Functions,…

Amazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel query).…

Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance store vs…

Activate when developers have latent caching needs: slow API responses, database read bottlenecks, DynamoDB throttling or cost, RDS/Aurora scaling pressure,…

Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks…

Runs SQL queries on CloudWatch Logs data exported as Apache Iceberg tables in S3 Tables. Covers VPC Flow Logs, WAF logs, CloudFront access logs, Route 53…

Guides migration, provisioning, search, log-analytics, trace-analytics, and Agentic AI Assistant workflows for Amazon OpenSearch Service and Serverless across…

Queries S3 object metadata, tracks bucket activity, audits object changes, searches annotations, and analyzes storage metrics using S3 Metadata system tables…

Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments running…

Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora serverless, express…

Routes any task involving AWS databases — choosing, comparing, recommending, getting started with, or operating a database — to the correct service-specific…

Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables,…

Evaluates, configures, and migrates workloads to AWS Lambda Managed Instances (LMI). Runs Lambda functions on EC2 instances in the user's account while AWS…

Builds resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and orchestration for…

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch…

Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS Firewall),…

Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation…

Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and…

Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and…

Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use when…

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security…

Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications — it creates…

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3,…

Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management. Sets up table bucket,…

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration,…

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers…

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user…

AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore. This…

Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon…