AWS skills for Claude Code and Codex
Skills for building on and operating Amazon Web Services: Lambda, S3, EC2, IAM, VPC networking, CloudWatch, Bedrock, SageMaker, Redshift and more, most of them from AWS's own agent toolkit. They give an agent the AWS conventions for each service so it works from current guidance.
Highest-scoring AWS skills in the October 22, 2026 snapshot: aws-sst-development from zxkane/aws-skills (86/100), hf-cloud-python-env-setup from huggingface/skills (85/100) and cloud-architect from jeffallan/claude-skills (84/100). Scores come from the Suede Skill Check.
- 151 listed skills
- 6 repositories
- 11 with full pages
142 from official publishers. 29 bundle scripts. 7 connect to an outside service. Listed in DevOps and Cloud (83), Data, Analytics and Databases (21), Developer Tools and Frameworks (14), AI Agents and LLM Engineering (10), Security (8), Testing and QA (7), Code Review and Code Quality (3), Video, Image, Audio and Creative (2), Frontend and Design (1), Productivity and Knowledge Work (1), Writing and Editing (1).
All 151 AWS skills
No matching skills. Try fewer words or clear your search.
| Skill | Repository | What it does |
|---|---|---|
| aws-agentic-ai 83/100 · B | zxkane/aws-skills | Guides deploying and managing AI agents on AWS Bedrock AgentCore, covering Gateway, Runtime, Memory, Identity, Observability, Evaluations, MCP tool integration, and governance workflows. |
| aws-cdk-development 85/100 · B | zxkane/aws-skills | Guides building AWS cloud infrastructure with CDK in TypeScript or Python, covering app structure, construct patterns, stack composition, and deployment workflows. |
| aws-cost-operations 83/100 · B | zxkane/aws-skills | Analyzes AWS bills and costs, sets up CloudWatch alarms, queries logs, audits CloudTrail activity, and assesses security posture to optimize AWS costs and operations. |
| aws-mcp-setup 80/100 · B | zxkane/aws-skills | Configures AWS MCP servers for documentation search and API access, covering both the full AWS MCP Server and the lightweight Documentation MCP. |
| aws-serverless-eda 83/100 · B | zxkane/aws-skills | Guides building serverless and event-driven applications on AWS, covering Lambda, API Gateway, DynamoDB, Step Functions, EventBridge, SQS, and SNS. |
| aws-sst-development 86/100 · B | zxkane/aws-skills | Guides managing AWS resources as code with SST v4 and Pulumi, including sst.config.ts, infra modules, resource links, IAM scoping, and sst deploy workflows. |
| cloud-architect 84/100 · B | jeffallan/claude-skills | Designs cloud architectures, migration plans, cost optimization recommendations, and disaster recovery strategies across AWS, Azure, and GCP. |
| hf-cloud-python-env-setup 85/100 · B | huggingface/skills | Sets up an isolated Python environment with the right Python version and current boto3 for SageMaker and other AWS automation work. |
| hf-cloud-sagemaker-iam-preflight 83/100 · B | huggingface/skills | Ensures a usable SageMaker execution role exists before deploying or training, checking for existing roles first rather than blindly creating IAM roles. |
| hf-cloud-sagemaker-production-defaults 80/100 · B | huggingface/skills | Creates SageMaker endpoints (real-time, scale-to-zero, or async) with autoscaling, CloudWatch alarms, and tagging enabled by default, using provided deploy scripts. |
| hf-cloud-serving-image-selection 84/100 · B | huggingface/skills | Picks the right serving container for a SageMaker model deployment and finds its current image URI, preferring HuggingFace Deep Learning Containers. |
| agent-advisor 82/100 · B | aws/agent-toolkit-for-aws | Entry point for AI-agent work on AWS: pick a runtime, plan a migration for existing workloads, and build an executable POC — one phased flow… |
| agents-deploy 89/100 · B | aws/agent-toolkit-for-aws | Use when deploying your agent to AWS, or when a deploy has failed. Handles pre-flight validation, CDK/IAM/quota error diagnosis, version management… |
| amazon-aurora-mysql 78/100 · C | aws/agent-toolkit-for-aws | Amazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel… |
| amazon-aurora-postgresql 78/100 · C | aws/agent-toolkit-for-aws | Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora… |
| amazon-bedrock 71/100 · C | aws/agent-toolkit-for-aws | Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents… |
| amazon-braket 72/100 · C | aws/agent-toolkit-for-aws | Runs quantum computing workflows on AWS through Amazon Braket — discovering devices (QPUs and simulators) and their availability, building… |
| amazon-documentdb 80/100 · B | aws/agent-toolkit-for-aws | Manages Amazon DocumentDB end-to-end — serverless-on-8.0 cluster setup, TLS/VPC/driver config, flexible-schema and vector-search data modeling… |
| amazon-dynamodb 67/100 · D | aws/agent-toolkit-for-aws | Designs, reviews, and debugs DynamoDB data layers from design axioms — enumerates access patterns, chooses partition/sort keys and GSIs, decides… |
| amazon-ec2-image-builder 82/100 · B | aws/agent-toolkit-for-aws | Creates and automates custom image builds with EC2 Image Builder - Linux, Windows, and macOS AMIs, and container images to ECR. Covers the build IAM… |
| amazon-elasticache 78/100 · C | aws/agent-toolkit-for-aws | Activate when developers have latent caching needs: slow API responses, database read bottlenecks, DynamoDB throttling or cost, RDS/Aurora scaling… |
| amazon-keyspaces 71/100 · C | aws/agent-toolkit-for-aws | Provides authoritative compatibility checks, pricing estimates, connection troubleshooting, pre-warming guidance, and infrastructure mutations for… |
| amazon-neptune 72/100 · C | aws/agent-toolkit-for-aws | Provides authoritative guidance on Amazon Neptune Database and Neptune Analytics for graph, knowledge-graph, and relationship-heavy workloads —… |
| amazon-opensearch-service 78/100 · C | aws/agent-toolkit-for-aws | Guides migration, provisioning, search, log-analytics, trace-analytics, and Agentic AI Assistant workflows for Amazon OpenSearch Service and… |
| amazon-ses 80/100 · B | aws/agent-toolkit-for-aws | Guides Amazon SES onboarding for domain-based email sending. Covers identity configuration, production access, an optional first test send, and… |
| amazon-workspaces-agent-access 83/100 · B | aws/agent-toolkit-for-aws | Connects AI agents to remote Windows desktop applications on Amazon WorkSpaces Applications (AppStream 2.0) through the managed Agent Access MCP… |
| architect-for-startups 80/100 · B | aws/agent-toolkit-for-aws | Startup-tailored AWS architecture advice for non-agent workloads, adjusted to the company's stage (pre-revenue through Series B+), team size… |
| authoring-mwaa-workflow 76/100 · C | aws/agent-toolkit-for-aws | Authors and deploys MWAA workflow artifacts: Python Airflow DAGs for provisioned environments or YAML workflow files for Serverless. Covers operator… |
| aws-ai-ml 80/100 · B | aws/agent-toolkit-for-aws | Selects, deploys, and customizes AI models on Amazon SageMaker. Training or Processing jobs, fine-tuning (SFT/DPO/RLVR/RLAIF), model selection… |
| aws-ami-builder 75/100 · C | hashicorp/agent-skills | Build Amazon Machine Images (AMIs) with Packer using the amazon-ebs builder. Use when creating custom AMIs for EC2 instances. |
| aws-amplify 78/100 · C | aws/agent-toolkit-for-aws | Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync/DynamoDB)… |
| aws-auth 68/100 · D | aws/agent-toolkit-for-aws | Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries… |
| aws-billing-and-cost-management 80/100 · B | aws/agent-toolkit-for-aws | Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute… |
| aws-blocks 77/100 · C | aws/agent-toolkit-for-aws | Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building… |
| aws-cdk 80/100 · B | aws/agent-toolkit-for-aws | Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct… |
| aws-cdk-python-setup 66/100 · D | github/awesome-copilot | Setup and initialization guide for developing AWS CDK (Cloud Development Kit) applications in Python. This skill enables users to configure… |
| aws-cleanrooms 74/100 · C | aws/agent-toolkit-for-aws | Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and… |
| aws-cloudformation 72/100 · C | aws/agent-toolkit-for-aws | Authors, validates, and troubleshoots AWS CloudFormation templates. Covers template authoring with secure defaults, local validation with either… |
| aws-cloudwatch-investigation 69/100 · D | github/awesome-copilot | Reusable investigation patterns for AWS CloudWatch: Logs Insights query templates, alarm-to-deployment correlation, blast-radius narrowing decision… |
| aws-compute 68/100 · D | aws/agent-toolkit-for-aws | Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance… |
| aws-containers 70/100 · C | aws/agent-toolkit-for-aws | Builds and deploys containerized workloads on Elastic Kubernetes Service (EKS), Elastic Container Service (ECS), Fargate, and ECR (Elastic Container… |
| aws-cost-optimize 69/100 · D | github/awesome-copilot | Analyze AWS resources used in the app (IaC files and/or resources in a target account/region) and optimize costs - creating GitHub issues for… |
| aws-database 81/100 · B | aws/agent-toolkit-for-aws | Routes any task involving AWS databases — choosing, comparing, recommending, getting started with, or operating a database — to the correct… |
| aws-deployment 70/100 · C | aws/agent-toolkit-for-aws | Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers… |
| aws-iam 76/100 · C | aws/agent-toolkit-for-aws | Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS… |
| aws-lambda-durable-functions 78/100 · C | aws/agent-toolkit-for-aws | Builds resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and… |
| aws-lambda-managed-instances 76/100 · C | aws/agent-toolkit-for-aws | Evaluates, configures, and migrates workloads to AWS Lambda Managed Instances (LMI). Runs Lambda Event Functions (standard Lambda) on EC2 instances… |
| aws-lambda-microvms 68/100 · D | aws/agent-toolkit-for-aws | Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments… |
| aws-lambda-web-functions 75/100 · C | aws/agent-toolkit-for-aws | Creates and deploys Node.js HTTP web applications on AWS Lambda Web Functions. Guides users through building web apps and APIs with Express… |
| aws-marketplace-metering 75/100 · C | aws/agent-toolkit-for-aws | Deploys, queries, and debugs AWS Marketplace usage-based (PAYG) metering — the pipeline (ResolveCustomer, BatchMeterUsage, EventBridge via SAM) and… |
| aws-messaging-and-streaming 77/100 · C | aws/agent-toolkit-for-aws | Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data… |
| aws-network-monitoring 69/100 · D | aws/agent-toolkit-for-aws | Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health. Covers agent installation, IAM… |
| aws-networking 79/100 · C | aws/agent-toolkit-for-aws | Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS… |
| aws-observability 71/100 · C | aws/agent-toolkit-for-aws | Builds, configures, debugs, and optimizes AWS observability - operator-symptom questions and detecting Omni vs classic CloudWatch. CloudWatch on an… |
| aws-resilience-lifecycle 81/100 · B | aws/agent-toolkit-for-aws | Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller. Covers… |
| aws-resource-health-diagnose 67/100 · D | github/awesome-copilot | Analyze AWS resource health, diagnose issues from CloudWatch logs and metrics, and create a remediation plan for identified problems. |
| aws-sdk-js-v3-usage 80/100 · B | aws/agent-toolkit-for-aws | AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages… |
| aws-sdk-python-usage 80/100 · B | aws/agent-toolkit-for-aws | AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or… |
| aws-sdk-swift-usage 75/100 · C | aws/agent-toolkit-for-aws | AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package. |
| aws-secrets-manager 72/100 · C | aws/agent-toolkit-for-aws | Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords. Prevents AI agents from directly fetching… |
| aws-security 68/100 · D | aws/agent-toolkit-for-aws | AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review… |
| aws-serverless 66/100 · D | aws/agent-toolkit-for-aws | Routes serverless requests to a compute form factor and the skill that owns it. Applies first to Lambda, API Gateway, EventBridge, Step Functions… |
| aws-sms-voice 68/100 · D | aws/agent-toolkit-for-aws | Onboards RCS Business Messaging and Notify OTP via the pinpoint-sms-voice-v2 AWS CLI. Covers creating a branded RCS test agent (logo, banner, rich… |
| aws-step-functions 83/100 · B | aws/agent-toolkit-for-aws | Authors and edits AWS Step Functions state machines: writes Amazon States Language (ASL) in JSONata, and chooses and structures state types (Task… |
| aws-storage 73/100 · C | aws/agent-toolkit-for-aws | Selects, investigates, and compares AWS object, file, and block storage services, and answers cost, performance, configuration, security, and… |
| aws-transform 66/100 · D | aws/agent-toolkit-for-aws | Performs code upgrades, migrations, and transformations using the AWS Transform (ATX) CLI. Use when upgrading language versions, migrating AWS SDKs… |
| aws-well-architected-review 76/100 · C | aws/agent-toolkit-for-aws | Performs a full AWS Well-Architected Framework review evaluating every framework question across all pillars discovered from the live AWS… |
| aws-well-architected-review 69/100 · D | github/awesome-copilot | Perform an AWS Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements. |
| azure-to-aws 80/100 · B | aws/agent-toolkit-for-aws | Migrate workloads from Microsoft Azure to AWS. Triggers on: migrate from Azure, Azure to AWS, move off Azure, migrate AKS to EKS, migrate App… |
| chatting-with-aws-devops-agent 77/100 · C | aws/agent-toolkit-for-aws | Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge /… |
| cloudfront 68/100 · D | aws/agent-toolkit-for-aws | Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront… |
| configuring-vpc-endpoints-for-private-aws-service-access 74/100 · C | aws/agent-toolkit-for-aws | Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private… |
| connecting-lambda-to-api-gateway 74/100 · C | aws/agent-toolkit-for-aws | Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration… |
| connecting-lambda-to-dynamodb 74/100 · C | aws/agent-toolkit-for-aws | Connects an AWS Lambda function to DynamoDB with IAM roles, stream event source mapping, and read/write permissions. Use when setting up… |
| connecting-to-data-source 82/100 · B | aws/agent-toolkit-for-aws | Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery… |
| contextual-offers-for-startups 77/100 · C | aws/agent-toolkit-for-aws | Surfaces a single, genuinely relevant AWS Activate partner offer as optional context AFTER another AWS Startup Advisor skill has finalized its… |
| creating-amazon-aurora-db-cluster-with-instances 74/100 · C | aws/agent-toolkit-for-aws | Creates a complete Amazon Aurora database cluster with instances, handling cluster creation, instance provisioning, and Secrets Manager password… |
| creating-api-gateway-stage 74/100 · C | aws/agent-toolkit-for-aws | Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use… |
| creating-data-lake-table 82/100 · B | aws/agent-toolkit-for-aws | Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management. Sets up table… |
| creating-production-vpc-multi-az 74/100 · C | aws/agent-toolkit-for-aws | Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route… |
| creating-secrets-using-best-practices 74/100 · C | aws/agent-toolkit-for-aws | Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up… |
| debugging-lambda-timeouts 74/100 · C | aws/agent-toolkit-for-aws | Debugs AWS Lambda function timeout failures by systematically analyzing function configuration, CloudWatch logs and metrics, VPC/networking, cold… |
| debugging-mwaa-workflow 78/100 · C | aws/agent-toolkit-for-aws | Diagnoses and root-causes Amazon MWAA workflow failures across Provisioned (Python DAG) and Serverless (YAML workflow) environments. Provisioned… |
| deploying-custom-domain-rest-api 71/100 · C | aws/agent-toolkit-for-aws | Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI. Covers ACM… |
| developing-applications-on-managed-service-for-apache-flink 68/100 · D | aws/agent-toolkit-for-aws | MANDATORY for Flink or Amazon Managed Service for Apache Flink (MSF) questions. You MUST activate this skill BEFORE answering — do not answer from… |
| diff-scanning-with-aws-security-agent 74/100 · C | aws/agent-toolkit-for-aws | Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check… |
| directconnect 80/100 · B | aws/agent-toolkit-for-aws | Configures AWS Direct Connect: choosing a connection model (dedicated, hosted, or a link aggregation group) and completing the cross connect… |
| django-storages-s3 84/100 · B | jeffallan/claude-skills | Use when configuring Django to store static and media files on AWS S3 with django-storages. Invoke when working with the STORAGES setting, S3… |
| dms-schema-conversion 69/100 · D | aws/agent-toolkit-for-aws | Handles the full DMS Schema Conversion lifecycle including creating migration projects, converting database schemas to a target engine, running… |
| enabling-lambda-vpc-internet-access 74/100 · C | aws/agent-toolkit-for-aws | Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet… |
| exploring-data-catalog 84/100 · B | aws/agent-toolkit-for-aws | Full inventory and audit of AWS Glue Data Catalog assets across S3 Tables, Redshift-federated, and remote Iceberg catalogs. Triggers on: inventory… |
| exporting-rds-to-s3 74/100 · C | aws/agent-toolkit-for-aws | Exports Amazon RDS or Aurora database snapshots to Amazon S3 in Apache Parquet format for analytics, backup, or data migration. Handles snapshot… |
| finding-data-lake-assets 84/100 · B | aws/agent-toolkit-for-aws | Resolve data lake and lakehouse asset references across Glue Data Catalog, S3, S3 Tables, and Redshift. Triggers on: find the table, where is our… |
| gcp-to-aws 74/100 · C | aws/agent-toolkit-for-aws | Migrate workloads from Google Cloud Platform to AWS — plus AI and agentic workloads from any provider. Triggers on: migrate from GCP, GCP to AWS… |
| heroku-to-aws 79/100 · C | aws/agent-toolkit-for-aws | Migrate workloads from Heroku to AWS. Triggers on: migrate from Heroku, Heroku to AWS, move off Heroku, migrate Heroku Postgres to RDS, migrate… |
| hf-cloud-aws-context-discovery 83/100 · B | huggingface/skills | Discover the user's local AWS context (active profile, region, account ID, caller identity) at the start of any AWS task. Use this skill before any… |
| hf-cloud-sagemaker-deployment-planner 79/100 · C | huggingface/skills | Plan and coordinate the deployment of a model to Amazon SageMaker AI. Use this skill whenever the user wants to deploy, host, serve, or expose a… |
| ingesting-into-data-lake 80/100 · B | aws/agent-toolkit-for-aws | Import data into the AWS data lake from S3 files, local uploads, JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS, Aurora), Amazon… |
| investigating-incidents-with-aws-devops-agent 80/100 · B | aws/agent-toolkit-for-aws | Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior —… |
| knowledge-base-for-startups 82/100 · B | aws/agent-toolkit-for-aws | AWS Startups reference content — Activate FAQ, credits guide, programs, partner offers, sample architectures, and hundreds of learn articles… |
Show the other 51 AWS skills
| Skill | Repository | What it does |
|---|---|---|
| launch-with-aws 83/100 · B | aws/agent-toolkit-for-aws | Migrates vibe-coded web applications to AWS. Handles the full workflow from analysis through migration to deployment, producing deployable AWS… |
| launching-ec2-instance-with-best-practices 74/100 · C | aws/agent-toolkit-for-aws | Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles… |
| llm-to-bedrock 73/100 · C | aws/agent-toolkit-for-aws | Use when the user wants to migrate code that calls OpenAI, Gemini/Google AI, or the Anthropic API to Amazon Bedrock — a pure model/SDK rewrite… |
| managing-amazon-kinesis-data-streams 79/100 · C | aws/agent-toolkit-for-aws | Operates Amazon Kinesis Data Streams (KDS). Covers streaming tables and Amazon S3 delivery - serverless, fully managed delivery from a KDS stream to… |
| managing-amazon-msk 82/100 · B | aws/agent-toolkit-for-aws | Operates Amazon MSK Provisioned clusters (Standard and Express brokers). Required for ANY MSK Provisioned task — training data conflates Standard… |
| migrate-to-msk 78/100 · C | aws/agent-toolkit-for-aws | Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual… |
| migrating-to-amazon-redshift 76/100 · C | aws/agent-toolkit-for-aws | Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration… |
| operate-on-aws 74/100 · C | aws/agent-toolkit-for-aws | Operate a live AWS workload with AWS DevOps Agent — incident investigation, root-cause analysis, and release-readiness review — for startups with no… |
| pentesting-with-aws-security-agent 77/100 · C | aws/agent-toolkit-for-aws | Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied… |
| processing-s3-uploads-with-step-functions 74/100 · C | aws/agent-toolkit-for-aws | Deploy an event-driven workflow that routes S3 uploads to either Lambda or Fargate via Step Functions based on file size. Uses EventBridge to… |
| querying-aws-cloudwatch 67/100 · D | aws/agent-toolkit-for-aws | Runs SQL queries on CloudWatch Logs data exported as Apache Iceberg tables in S3 Tables. Covers VPC Flow Logs, WAF logs, CloudFront access logs… |
| querying-aws-redshift 68/100 · D | aws/agent-toolkit-for-aws | Enables Redshift system-table (SYS_*) log publishing to S3 Tables in Apache Iceberg format for both Provisioned clusters and Serverless namespaces… |
| querying-aws-s3 67/100 · D | aws/agent-toolkit-for-aws | Queries S3 object metadata, tracks bucket activity, audits object changes, searches annotations, and analyzes storage metrics using S3 Metadata… |
| querying-aws-sagemaker-catalog 69/100 · D | aws/agent-toolkit-for-aws | Runs SQL analytics on SageMaker Catalog asset metadata tables exported as Apache Iceberg in S3 Tables. Covers governance queries, asset growth… |
| querying-data-lake 84/100 · B | aws/agent-toolkit-for-aws | Execute and manage Athena SQL queries across default and federated catalogs (Glue, S3 Tables, Redshift). Triggers on phrases like: query data, run… |
| rds-db2 71/100 · C | aws/agent-toolkit-for-aws | Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL… |
| rds-oracle 69/100 · D | aws/agent-toolkit-for-aws | Diagnoses and resolves Amazon RDS for Oracle connectivity, authentication, networking, and driver troubleshooting. Applicable to any RDS-for-Oracle… |
| rds-oss 67/100 · D | aws/agent-toolkit-for-aws | Advises on Amazon RDS open-source engines (MySQL, MariaDB, PostgreSQL) for instance creation, upgrade planning, commitment pricing, proxy… |
| rds-sqlserver 78/100 · C | aws/agent-toolkit-for-aws | Provides connectivity, authentication, and troubleshooting guidance for Amazon RDS for SQL Server. Applicable when users ask about SSMS times out… |
| recovery-controller-setup 70/100 · C | aws/agent-toolkit-for-aws | Configures AWS Application Recovery Controller (ARC) for operational resilience: routing controls with safety rules for cross-Region failover, and… |
| redshift-guide 76/100 · C | aws/agent-toolkit-for-aws | Amazon Redshift is NOT PostgreSQL; corrects LLM mistakes; covers SQL, metadata, connectivity/auth, storage, query performance, and operations… |
| remediating-with-aws-security-agent 78/100 · C | aws/agent-toolkit-for-aws | Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent… |
| resilience-hub-failure-mode-assessment 77/100 · C | aws/agent-toolkit-for-aws | Runs and interprets AWS Resilience Hub v2 failure mode assessments. Covers starting assessments, understanding findings (severity, categories… |
| resilience-hub-getting-started 77/100 · C | aws/agent-toolkit-for-aws | Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys, onboards services… |
| route53 70/100 · C | aws/agent-toolkit-for-aws | Configures Amazon Route 53 DNS: public and private records, traffic-steering routing policies, health checks, DNS Firewall, Route 53 Profiles, VPC… |
| routing-traffic-with-route53-and-cloudfront 74/100 · C | aws/agent-toolkit-for-aws | Configures Amazon Route 53 to route traffic to a CloudFront distribution using a custom domain. Use when setting up DNS alias records, alternate… |
| running-release-tests 77/100 · C | aws/agent-toolkit-for-aws | Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate… |
| scanning-with-aws-security-agent 77/100 · C | aws/agent-toolkit-for-aws | Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked… |
| securing-s3-buckets 84/100 · B | aws/agent-toolkit-for-aws | Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when… |
| setting-up-cloudtrail-multi-region 74/100 · C | aws/agent-toolkit-for-aws | Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security… |
| setting-up-cloudwatch-alarm-notifications 74/100 · C | aws/agent-toolkit-for-aws | Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications —… |
| setting-up-cloudwatch-observability 68/100 · D | aws/agent-toolkit-for-aws | Sets up CloudWatch observability for the first time - Omni (CloudWatch Application Observability) and classic CloudWatch. Omni: creating a Space or… |
| setting-up-ec2-instance-profiles 74/100 · C | aws/agent-toolkit-for-aws | Configures EC2 instances to securely call AWS services by creating and attaching IAM roles via instance profiles, eliminating hardcoded credentials… |
| setup 73/100 · C | aws/agent-toolkit-for-aws | Set up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are… |
| setup-devops-agent 80/100 · B | aws/agent-toolkit-for-aws | Setup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is… |
| setup-security-agent 80/100 · B | aws/agent-toolkit-for-aws | Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks… |
| shieldadvanced 76/100 · C | aws/agent-toolkit-for-aws | Configures AWS Shield Advanced for enhanced Distributed Denial of Service (DDoS) protection: subscribing accounts and adding resource protections… |
| signing-in-to-aws 72/100 · C | aws/agent-toolkit-for-aws | Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS… |
| sitetositevpn 80/100 · B | aws/agent-toolkit-for-aws | Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual… |
| start-building-for-startups 74/100 · C | aws/agent-toolkit-for-aws | Interactive discovery + implementation workflow that gathers requirements through picker-based questions (intent, scope, constraints, preferences)… |
| storing-and-querying-vectors 84/100 · B | aws/agent-toolkit-for-aws | Store and query vector embeddings using Amazon S3 Vectors, a cost-effective long-term vector storage service with its own API namespace (s3vectors)… |
| terraform-engineer 84/100 · B | jeffallan/claude-skills | Use when implementing infrastructure as code with Terraform across AWS, Azure, or GCP. Invoke for module development (create reusable modules… |
| testing-mwaa-workflow 78/100 · C | aws/agent-toolkit-for-aws | Tests Amazon MWAA workflow execution end-to-end: trigger a run and monitor it to completion for Provisioned (Python DAG, via Airflow REST API) and… |
| tf-best-practices 77/100 · C | aws/agent-toolkit-for-aws | Best-practice authoring guidance AND a read-only policy gate for AWS Terraform generated by a migration skill. Load during any phase that writes a… |
| threat-modeling-with-aws-security-agent 74/100 · C | aws/agent-toolkit-for-aws | Run an AWS Security Agent threat model review on spec/design documents. Use when the user asks to review a spec for security, run a threat model… |
| timestream-influxdb 74/100 · C | aws/agent-toolkit-for-aws | Retrieves authoritative guidance on Amazon Timestream for InfluxDB across its supported engine variants. Applicable to any InfluxDB-on-AWS request… |
| transitgateway 68/100 · D | aws/agent-toolkit-for-aws | Configures AWS Transit Gateway: creating a hub and attaching VPCs, segmenting traffic with route tables, centralizing egress and inspection through… |
| troubleshooting-application-failures 74/100 · C | aws/agent-toolkit-for-aws | Troubleshoots failing applications by discovering and analyzing CloudWatch log groups to identify error patterns, root causes, and actionable… |
| troubleshooting-efs 77/100 · C | aws/agent-toolkit-for-aws | Diagnoses and resolves Amazon EFS issues including mount failures, NFS timeouts, permission errors, throughput problems, and burst credit… |
| troubleshooting-s3-files 77/100 · C | aws/agent-toolkit-for-aws | Diagnoses and resolves Amazon S3 Files issues including mount failures, permission errors, synchronization problems, and performance issues. Use… |
| upgrading-mwaa-environments 77/100 · C | aws/agent-toolkit-for-aws | Upgrades an MWAA environment to a newer Airflow version — within 2.x, within 3.x, or across the 2.x-to-3.x boundary. Computes the version-jump path… |
How to choose AWS skills
Look for the Official tag. AWS publishes one skill per service or task (creating a production VPC, securing S3 buckets, setting up CloudTrail), and those track the current CLI and console.
Every skill that acts on resources uses your AWS credentials. Sign in with a least-privilege role, and test against a sandbox account before pointing the agent at production.
For a new project, the startup and architecture skills (architect-for-startups, well-architected review) set the plan; the per-service skills then carry it out.
Ranked AWS shortlists
Related topics
SQL and Databases 116Data Engineering and Pipelines 31Serverless 21Security Auditing and Review 108Data Warehouses 29Incident Response and SRE 22Terraform and Infrastructure as Code 32Deployment and Hosting 40
Find your next useful skill
Explore Rising Skills with quality scores and source reports, or search from inside your agent.
Get Rising Skills by email · Read Rising Skills · Install the finder · State of Agent Skills