AWS Skill
Expert-level AWS infrastructure management. Covers the full stack from networking to observability.
RULE: Always show what will be created/changed and wait for GO before executing.
🚧 Status: Stub — implementation pending
This reference skill has the structure but the snippet content is still being filled in
(you'll see <!-- TODO --> placeholders below). It activates and tells Claude the topic
exists, but won't yield deep snippets yet.
Want to help? Pick any TODO, write the snippet, open a PR. See CONTRIBUTING.md.
Each contribution moves the skill closer to "Ready" status.
Capabilities
EKS Cluster Setup & Management
ECR Image Push/Pull Workflows
VPC, Subnets, Security Groups
RDS, ElastiCache, S3
Route53, ACM SSL
Secrets Manager Integration
CloudWatch + Alerting
IAM Roles & Policies
Common Workflows
Authenticate to EKS
aws eks update-kubeconfig --name [cluster-name] --region [region]
kubectl get nodes
Authenticate to ECR and push
aws ecr get-login-password --region [region] | \
docker login --username AWS --password-stdin \
[account-id].dkr.ecr.[region].amazonaws.com
docker build -t [app] .
docker tag [app]:latest [account-id].dkr.ecr.[region].amazonaws.com/[app]:latest
docker push [account-id].dkr.ecr.[region].amazonaws.com/[app]:latest
Check CloudWatch logs
aws logs tail /aws/eks/[cluster]/cluster --follow
aws logs tail /ecs/[service] --follow --filter-pattern "ERROR"
Quick Reference
| Service |
Console shortcut |
CLI prefix |
| EKS |
eks.console.aws.amazon.com |
aws eks |
| ECR |
ecr.console.aws.amazon.com |
aws ecr |
| RDS |
rds.console.aws.amazon.com |
aws rds |
| S3 |
s3.console.aws.amazon.com |
aws s3 |
| IAM |
iam.console.aws.amazon.com |
aws iam |
1---2name: aws3description: AWS infrastructure management — EKS, ECR, VPC, RDS, ElastiCache, S3, Route53, ACM, Secrets Manager, CloudWatch, IAM4---56# AWS Skill78Expert-level AWS infrastructure management. Covers the full stack from networking to observability.910**RULE: Always show what will be created/changed and wait for GO before executing.**1112> **🚧 Status: Stub — implementation pending**13>14> This reference skill has the structure but the snippet content is still being filled in15> (you'll see `<!-- TODO -->` placeholders below). It activates and tells Claude the topic16> exists, but won't yield deep snippets yet.17>18> **Want to help?** Pick any TODO, write the snippet, open a PR. See [CONTRIBUTING.md](../../CONTRIBUTING.md).19> Each contribution moves the skill closer to "Ready" status.2021---2223## Capabilities2425### EKS Cluster Setup & Management26<!-- TODO: Step-by-step EKS cluster creation, node group configs, OIDC provider, kubectl access setup -->27<!-- TODO: Cluster upgrades, managed add-ons, Fargate profiles -->2829### ECR Image Push/Pull Workflows30<!-- TODO: ECR auth, lifecycle policies, cross-account access, image scanning -->31<!-- TODO: docker build → tag → push pipeline, pull-through cache -->3233### VPC, Subnets, Security Groups34<!-- TODO: Multi-AZ VPC design, public/private/isolated subnet tiers -->35<!-- TODO: Security group rules, NACLs, VPC flow logs, peering -->3637### RDS, ElastiCache, S338<!-- TODO: RDS parameter groups, Multi-AZ, read replicas, snapshots -->39<!-- TODO: ElastiCache Redis cluster, node types, failover -->40<!-- TODO: S3 bucket policies, versioning, lifecycle, static hosting, presigned URLs -->4142### Route53, ACM SSL43<!-- TODO: Hosted zone setup, A/CNAME/alias records -->44<!-- TODO: ACM certificate request, DNS validation, wildcard certs -->45<!-- TODO: Health checks, failover routing, latency routing -->4647### Secrets Manager Integration48<!-- TODO: Secret creation, rotation, cross-account access -->49<!-- TODO: App integration patterns (Node, Python, Go) -->5051### CloudWatch + Alerting52<!-- TODO: Log groups, metric filters, dashboards -->53<!-- TODO: Alarms, SNS notifications, composite alarms -->54<!-- TODO: Container Insights for EKS -->5556### IAM Roles & Policies57<!-- TODO: Least-privilege policy design, IRSA for EKS, permission boundaries -->58<!-- TODO: Cross-account role assumption, service-linked roles -->5960---6162## Common Workflows6364### Authenticate to EKS65```bash66aws eks update-kubeconfig --name [cluster-name] --region [region]67kubectl get nodes68```6970### Authenticate to ECR and push71```bash72aws ecr get-login-password --region [region] | \73 docker login --username AWS --password-stdin \74 [account-id].dkr.ecr.[region].amazonaws.com7576docker build -t [app] .77docker tag [app]:latest [account-id].dkr.ecr.[region].amazonaws.com/[app]:latest78docker push [account-id].dkr.ecr.[region].amazonaws.com/[app]:latest79```8081### Check CloudWatch logs82```bash83aws logs tail /aws/eks/[cluster]/cluster --follow84aws logs tail /ecs/[service] --follow --filter-pattern "ERROR"85```8687---8889## Quick Reference9091| Service | Console shortcut | CLI prefix |92|---------|-----------------|------------|93| EKS | eks.console.aws.amazon.com | `aws eks` |94| ECR | ecr.console.aws.amazon.com | `aws ecr` |95| RDS | rds.console.aws.amazon.com | `aws rds` |96| S3 | s3.console.aws.amazon.com | `aws s3` |97| IAM | iam.console.aws.amazon.com | `aws iam` |9899<!-- TODO: Add full interactive workflows for each capability section above -->
aibot88