# AWS > Amazon Web Services cloud platform with Lambda, EC2, S3, and RDS. Use for AWS infrastructure. Use when this capability is needed. - Skill: `tomevault-io/aws` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/aws` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/aws/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/aws --- # AWS Amazon Web Services (AWS) is the dominant cloud platform. In 2025, the focus is heavily on **Generative AI** (Bedrock, Q, Trainium chips) and **Serverless Data** (Aurora Limitless). ## When to Use - **Enterprise**: The default choice for large-scale, compliant infrastructure. - **AI/ML**: Amazon SageMaker and Bedrock provide the deepest toolset for training and inference. - **Serverless**: Lambda + DynamoDB + API Gateway is the canonical serverless stack. ## Core Concepts ### VPC (Virtual Private Cloud) Your isolated network. Subnets, Route Tables, Internet Gateways. Understanding networking is mandatory. ### IAM (Identity and Access Management) Global service for permissions. "Deny by default". Use **Roles** for services, not access keys. ### Compute - **EC2**: Virtual Machines. - **ECS/EKS**: Containers (Docker/K8s). - **Lambda**: Function-as-a-Service. ## Best Practices (2025) **Do**: - **Use AWS Organizations**: Separate Prod, Staging, and Dev into different _Accounts_, not just VPCs. Limits blast radius. - **Use CDK / Terraform**: Never click in the console for production resources. - **Cost Control**: Enable Cost Explorer and set up Budgets/Alerts on day one. **Don't**: - **Don't use Public Subnets for Apps**: Put your EC2s/RDS in Private Subnets. Only Load Balancers go in Public Subnets. ## References - [AWS Documentation](https://docs.aws.amazon.com/) --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/g1joshi) — claim your Tome and manage your conversions.