aws-samples

@aws-samples source repo

848 skills
0 followers
last month last updated

▌
Ecs · aws-samples bundle
This skill should be used when the user asks to "deploy containers on ECS", "set up an ECS service", "choose between Fargate and EC2", "configure ECS task definitions", "set up ECS auto-scaling", "use ECS Express Mode", "migrate from App Runner", or mentions ECS load balancing, deployment strategies, or container orchestration on AWS.

6 installs
▌
Eks · aws-samples
Design, deploy, and troubleshoot Amazon EKS clusters. Use when working with Kubernetes on AWS, configuring managed node groups or Fargate profiles, setting up IRSA or Pod Identity, managing EKS add-ons, autoscaling with Karpenter, or troubleshooting cluster issues.

5 installs
▌
Iam · aws-samples bundle
Design and review AWS IAM configurations. Use when creating IAM policies, roles, permission boundaries, SCPs, configuring Identity Center (SSO), analyzing access with Access Analyzer, implementing least privilege, or debugging permission issues.

5 installs
▌
Iot · aws-samples bundle
Deep-dive into AWS IoT architecture, device connectivity, edge computing, and fleet management. This skill should be used when the user asks to "design an IoT solution", "connect devices to AWS", "set up MQTT messaging", "configure IoT rules", "provision a device fleet", "use Greengrass at the edge", "build a device shadow", "set up IoT security", "manage OTA updates", "store telemetry data", "create IoT topic rules", "configure fleet provisioning", or mentions IoT Core, MQTT, Greengrass, Device Shadow, IoT Rules Engine, IoT Events, IoT SiteWise, fleet indexing, or device certificates.

5 installs
▌
Mlops · aws-samples bundle
End-to-end MLOps guidance on AWS — platform selection, training, inference, pipelines, monitoring, and cost optimization. This skill should be used when the user asks to "build an ML pipeline", "deploy a model on SageMaker", "set up MLOps", "configure SageMaker Pipelines", "choose between SageMaker and Bedrock", "deploy ML models to production", "set up model monitoring", "use MLflow on AWS", "train a model with Spot instances", "configure inference endpoints", "set up distributed training", or mentions SageMaker, MLflow, Kubeflow, ML pipelines, model registry, model monitoring, hyperparameter tuning, inference endpoints, or MLOps on AWS.

5 installs
▌
Lambda · aws-samples bundle
Design, build, and optimize AWS Lambda functions. Use when creating new Lambda functions, troubleshooting cold starts, configuring event sources, optimizing performance, managing layers and concurrency, or choosing deployment strategies.

5 installs
▌
Bedrock · aws-samples bundle
Deep-dive into Amazon Bedrock — model selection, agents, knowledge bases, guardrails, prompt engineering, and cost modeling. This skill should be used when the user asks to "build with Bedrock", "select a Bedrock model", "design a Bedrock agent", "set up a knowledge base", "configure guardrails", "estimate Bedrock costs", "optimize Bedrock pricing", "use prompt caching", "compare Bedrock models", or mentions Amazon Bedrock, foundation models, RAG on AWS, or generative AI on AWS.

7 installs
▌
AWS Plan · aws-samples
End-to-end AWS architecture planning — discovery, design, security review, cost estimate, and SCP recommendations. Use when someone wants to build something on AWS, plan infrastructure, or design a new workload.

7 installs
▌
Dynamodb · aws-samples bundle
Deep-dive into Amazon DynamoDB table design, access patterns, and operations. Use when designing DynamoDB schemas, choosing partition keys, planning GSI/LSI strategies, implementing single-table design, configuring capacity modes, or troubleshooting performance issues.

5 installs
▌
Ecs Soci · aws-samples
Generate a complete ECS Fargate SOCI (Seekable OCI) example with Terraform. Demonstrates lazy-loading container images for faster task startup using SOCI index v2 manifests. Includes a heavy ML inference container (PyTorch + FastAPI) with and without SOCI for comparison. Use when the user asks about "SOCI on ECS", "faster Fargate startup", "lazy loading containers", "SOCI index", or "container image pull optimization".

5 installs
▌
Agentcore · aws-samples bundle
Deep-dive into Amazon Bedrock AgentCore platform design, service selection, deployment, and production operations. This skill should be used when the user asks to "design an AgentCore architecture", "deploy agents on AgentCore", "configure AgentCore Runtime", "set up AgentCore Memory", "use AgentCore Gateway", "configure AgentCore Identity", "set up AgentCore Policy", "plan agent observability", "evaluate agent quality", "move agent PoC to production", or mentions AgentCore, AgentCore Runtime, AgentCore Memory, AgentCore Gateway, AgentCore Identity, AgentCore Policy, AgentCore Evaluations, AgentCore Code Interpreter, AgentCore Browser, A2A protocol, or multi-agent orchestration on AWS.

6 installs
▌
AWS Debug · aws-samples
Debug AWS infrastructure issues, deployment failures, and runtime errors. Use when troubleshooting CloudFormation stack failures, Lambda errors, ECS task failures, permission issues, networking problems, or any AWS service misbehavior.

3 installs
▌
Messaging · aws-samples bundle
Deep-dive into AWS messaging services including SQS, SNS, and EventBridge. Use when designing event-driven architectures, choosing between messaging services, configuring queues and topics, implementing fan-out patterns, setting up dead-letter queues, or troubleshooting message delivery issues.

8 installs
▌
Challenger · aws-samples
Adversarial reviewer that stress-tests other agents' outputs for reasoning gaps, unsupported assumptions, over-engineering, and missed alternatives. Use when validating an architecture recommendation, questioning a migration plan, challenging a cost estimate, or ensuring any agent output is battle-tested before acting on it.

5 installs
▌
Cloudfront · aws-samples
Design and configure Amazon CloudFront distributions. Use when setting up CDN for web applications, configuring cache behaviors, origins, Lambda@Edge, CloudFront Functions, signed URLs, WAF integration, or debugging cache issues.

6 installs
▌
Cost Check · aws-samples
Analyze and optimize AWS costs. Use when reviewing infrastructure for cost savings, estimating costs for new architectures, investigating unexpected charges, or comparing pricing between service options.

5 installs
▌
Networking · aws-samples bundle
Design and troubleshoot AWS networking. Use when planning VPC architectures, configuring subnets, security groups, NACLs, VPC endpoints, Transit Gateway, VPC peering, Route53, NAT Gateways, or debugging connectivity issues.

8 installs
▌
Rds Aurora · aws-samples bundle
Deep-dive into Amazon RDS and Aurora database design, engine selection, high availability, and operations. This skill should be used when the user asks to "design an RDS database", "choose between RDS and Aurora", "configure Aurora Serverless", "set up read replicas", "plan a database migration", "configure RDS Proxy", "tune database parameters", "set up Multi-AZ", "plan blue/green deployments", or mentions RDS, Aurora, Aurora Serverless v2, database failover, or relational database design on AWS.

4 installs
▌
AWS Compare · aws-samples
Compare 2-3 AWS architecture options side-by-side across cost, complexity, performance, security, and operational burden. Use when evaluating trade-offs between approaches or when the user is deciding between options.

6 installs
▌
AWS Diagram · aws-samples
Generate AWS architecture diagrams in Mermaid or ASCII from a description, existing IaC, or conversation context. Use when the user wants to visualize an architecture.

4 installs
▌
Iac Scaffold · aws-samples bundle
Scaffold new AWS infrastructure-as-code projects using CDK, Terraform, SAM, or CloudFormation. Use when creating new IaC projects, adding new stacks/modules, or setting up deployment pipelines for AWS infrastructure.

5 installs
▌
AWS Architect · aws-samples bundle
Design and review AWS architectures following Well-Architected Framework principles. Use when planning new infrastructure, reviewing existing architectures, evaluating trade-offs between AWS services, or when asked about AWS best practices.

5 installs
▌
Observability · aws-samples bundle
Design and implement AWS observability solutions. Use when configuring CloudWatch metrics, logs, alarms, dashboards, Logs Insights queries, X-Ray tracing, anomaly detection, or debugging monitoring gaps.

4 installs
▌
Strands Agent · aws-samples bundle
Scaffold and build AI agents using the Strands Agents SDK with Bedrock AgentCore. Use when creating new agent projects, building greenfield AgentCore applications, prototyping agents with Strands, or when asked about the Strands framework. Covers both TypeScript and Python.

7 installs
▌
Step Functions · aws-samples bundle
Design and build AWS Step Functions workflows. Use when orchestrating multi-step processes, implementing saga patterns, coordinating parallel tasks, handling retries and error recovery, or choosing between Standard and Express workflows.

4 installs
▌
Security Review · aws-samples
Review AWS infrastructure code and configurations for security issues. Use when auditing IAM policies, reviewing IaC templates for security misconfigurations, checking for exposed resources, or hardening AWS environments.

7 installs
▌
AWS Health Check · aws-samples
Quick health check on the current AWS account — security posture, cost waste, reliability gaps, and operational readiness. Lighter than a full Well-Architected review.

3 installs
▌
Well Architected · aws-samples bundle
Run formal AWS Well-Architected Framework reviews against workloads. Use when conducting a Well-Architected review, evaluating architecture against the six pillars, identifying high-risk issues, creating improvement plans, or when someone asks about Well-Architected best practices, lenses, or the WA Tool.

3 installs
▌
Customer Ideation · aws-samples
Guide customers from idea to AWS architecture with structured discovery, service selection, and Well-Architected review. Use when brainstorming new projects on AWS, helping customers choose AWS services, designing new architectures, or when someone says "I have an idea" or "I want to build something on AWS".

5 installs
▌
Migration GCP To AWS · aws-samples bundle
GCP to AWS migration guidance with service mappings, gotchas, and assessment. Use when migrating from Google Cloud Platform, mapping GCP services to AWS equivalents, assessing GCP environments, or planning GCP-to-AWS migrations.

8 installs
▌
Migration Azure To AWS · aws-samples bundle
Azure to AWS migration guidance with service mappings, gotchas, and assessment. Use when migrating from Microsoft Azure, mapping Azure services to AWS equivalents, assessing Azure environments, or planning Azure-to-AWS migrations.

5 installs
▌
Migration Apprunner To Ecs Express · aws-samples bundle
Guided migration from AWS App Runner to Amazon ECS Express Mode. Covers IAM setup, deployment, custom domains, DNS cutover, cost comparison, and troubleshooting. Use when the user asks to "migrate from App Runner", "move to ECS Express Mode", "replace App Runner", or mentions App Runner deprecation.

7 installs
▌
Fsi Ransomware Detect · aws-samples bundle
Provides design/assessment support for the detection/analysis aspect of ransomware countermeasures on AWS, for financial services organizations. Use when: (1) designing a detection/analysis posture from scratch, or (2) assessing an existing posture for gaps. Covers service impact detection (resource/service/synthetic/application monitoring), security attack detection (Amazon GuardDuty, third-party products), alert-triggered root-cause triage (manual checks) for external attacks, log-based analysis (Amazon Detective, SIEM on OpenSearch, infection checks), detection aggregation/delegated admin, and forensic vendor engagement prep. Activate on ransomware detection, service monitoring, attack detection, GuardDuty, or incident investigation mentions. Do NOT use for protection/backup, evidence preservation/forensics/isolation, on-prem detection, or unclear phase -- use fsi-ransomware-overview first. Target: FSI detection/analysis staff, incl. security/infra/DevOps and risk/compliance.

6 installs
▌
Fsi Ransomware Protect · aws-samples bundle
Provides architecture design and evaluation support for ransomware-resilient backup environments on AWS, for financial services industry organizations. Use when: (1) designing a backup architecture from scratch, or (2) evaluating an existing backup environment (AWS Backup, native per-service backups, third-party products) for resilience gaps. Covers multi-account role separation, AWS Backup with Logically air-gapped vault, Vault Lock, Multi-party approval, Malware Scan, cross-account/cross-Region copy, immutable backup design, encryption/key management, IAM/SCP policy design, log collection/protection, backup monitoring/auditing, and on-premises integration. Activate on mentions of ransomware-resilient backup design, immutable backups, air-gapped vaults, or AWS Backup architecture. Do NOT use for detection, response, recovery, or unclear phase -- use fsi-ransomware-overview first. Target users: FSI backup design/evaluation practitioners, incl. security/infra and risk/compliance staff.

4 installs
▌
Fsi Ransomware Recover · aws-samples bundle
This skill is a placeholder for the future "Recover" phase of ransomware countermeasures for financial institutions (post-incident restore and business recovery design). It is not yet implemented. Do NOT use this skill. For ransomware countermeasure guidance, use fsi-ransomware-overview to find an available phase skill.

5 installs
▌
Fsi Ransomware Respond · aws-samples bundle
This skill is a placeholder for the future "Respond" phase of ransomware countermeasures for financial institutions (evidence preservation, isolation, forensic vendor engagement). It is not yet implemented. Do NOT use this skill. For ransomware countermeasure guidance, use fsi-ransomware-overview to find an available phase skill.

5 installs
▌
Fsi Ransomware Overview · aws-samples bundle
Entry point for ransomware-countermeasure consultations on AWS for financial services organizations. Explains the 5-phase skill package (Protect, Detect, Respond, Recover, Organization) and guides users to the right phase. Activates broadly when the user does not know where to start, wants an overview, or cannot tell which phase (Protect/Detect/Respond/Recover/Organization) applies. Also activates on general mentions of ransomware countermeasures, where to start, or financial-institution ransomware countermeasures. Does not itself perform design/assessment (backup design, detection-posture assessment, etc.); these are handled by fsi-ransomware-protect, fsi-ransomware-detect, fsi-ransomware-respond, fsi-ransomware-recover, and fsi-ransomware-organization respectively. Recommended to use before those skills so consultations are triaged accurately.

5 installs
▌
Fsi Ransomware Organization · aws-samples bundle
This skill is a placeholder for the future "Organization" phase of ransomware countermeasures for financial institutions (CSIRT/SOC readiness, exercise planning, and cross-phase regulatory topics). It is not yet implemented. Do NOT use this skill. For ransomware countermeasure guidance, use fsi-ransomware-overview to find an available phase skill.

5 installs
▌
AWS Blogs · aws-samples bundle
Search and retrieve AWS blog posts (service guides, customer stories, event recaps, new feature announcements, etc.) from the public AWS Blog directory API. Supports both English (en_US) and Japanese (ja_JP) blogs — these are independent content sets, not translations of each other. Use this skill whenever the user wants to browse, search, or read AWS blog articles. Trigger keywords: AWS blog, AWS ブログ, blog search, blog article, blog post, customer story, 事例, new launch, what's new, ブログ検索, ブログ記事.

6 installs
▌
AWS Whatsnew · aws-samples bundle
Fetch AWS What's New announcements from the official AWS API. Use when users ask about recent AWS announcements, new features, service updates, or want to know what's new in AWS. Supports date range filtering and returns structured JSON with headline, URL, service name, and category.

4 installs
▌
Boj Statistics · aws-samples bundle
Fetch, search, and analyze time-series statistical data from the Bank of Japan (BOJ) public API. Covers all BOJ databases including interest rates, money markets, foreign exchange, monetary base, Tankan survey, price indices, balance of payments, flow of funds, and more. Use this skill whenever the user wants to retrieve Japanese macroeconomic or financial statistics, look up BOJ data series, check exchange rates, get Tankan DI values, or explore any time-series data published by the Bank of Japan. Also use when the user mentions 日銀, 日本銀行, 時系列統計, 短観, 為替, マネタリーベース, 国際収支, 企業物価, 資金循環, or any BOJ database name (FM08, CO, BP01, etc.). Trigger keywords: BOJ, Bank of Japan, 日銀, 日本銀行, 時系列統計, Tankan, 短観, exchange rate, 為替, interest rate, 金利, monetary base, マネタリーベース, money stock, マネーストック, balance of payments, 国際収支, price index, 物価指数, flow of funds, 資金循環, BOJ statistics, 日銀統計, 統計データ.

7 installs
▌
Fsi Capital Oms · aws-samples bundle
Case study of a cloud-native Order Management System (OMS) for capital markets / securities firms (資本市場 OMS, オーダー管理システム, 証券会社受発注), based on real domestic and overseas brokerage OMS architectures. It shows how to balance the latency / scalability / high-availability trilemma by separating "order receipt & fill" from "order placement & execution" and connecting them with a low-latency messaging tier (Amazon ElastiCache for Redis / Redis Streams), plus AWS Outposts for exchange-proximity execution and AWS Auto Zone Shift for AZ failover. Use this skill when designing or reviewing an OMS / EMS / low-latency trading platform on AWS for a securities firm (証券取引システム, トレードライフサイクル, 低レイテンシー, 取引所連携), or when the user references BLEA for FSI capital-oms.

5 installs
▌
Fsi Banking Core · aws-samples bundle
Reference architecture knowledge for a bank Core Banking (勘定系) workload on AWS from the Financial Reference Architecture Japan Edition (BLEA for FSI). Covers mission-critical, highly available multi-region designs: warm-standby across Tokyo/Osaka regions, Aurora Global Database (or the experimental Aurora DSQL option), DynamoDB global tables, ECS microservices with the Saga pattern, Application Recovery Controller + Step Functions failover, Canary external monitoring, ransomware-resistant AWS Backup vault lock, and FISC compliance mapping. Use when designing, reviewing, or deploying a core banking / 勘定系 / deposit / exchange / lending workload, planning region failover (RTO ~5 min), or mapping to FISC 安全対策基準.

5 installs
▌
MCP Tool Invoker · aws-samples bundle
Reference skill for calling MCP servers via CLI tools. Other skills should reference this skill when they need to invoke MCP server tools from CLI, TypeScript, or Python. Use this skill whenever another skill needs to call an MCP server tool, list available MCP tools, or integrate MCP server capabilities into a workflow. Also use when the user asks about MCP tool invocation from scripts, or wants to call an MCP server from the command line. Trigger keywords: MCP server call, MCP tool invocation, MCPサーバー呼び出し, MCPツール実行, mcp-tool-invoker.

4 installs
▌
Product Planning · aws-samples bundle
Run a product-planning workshop via interactive dialogue with an AI coding agent. Offers two approach modes (Marketing-first with PEST/5Forces/3C/ValueChain/SWOT/STP/4P, and Working Backwards with PR/FAQ/Review/Final Review) and three sub-modes (production workshop, dry-run execution where the AI acts as a persona, and scenario creation). Use when the user says "product planning", "new product", "商品企画", "商品を企画したい", "新商品を考えたい", "marketing analysis", "マーケティング分析", "Working Backwards", "PR/FAQ", "SWOT", "SWOT 分析", "STP", "4P", "customer journey", "カスタマージャーニー", "persona", "ペルソナ作成", "dry run", "scenario creation", "シナリオ作成", or types the slash command `/product-planning`. Mode is selected via natural language after activation.

5 installs
▌
Fsa Announcements · aws-samples bundle
Fetch announcements from the Financial Services Agency of Japan (FSA), combining the official news RSS feed (~15 latest items) with archive pages recent{YYYY}.html for date-range queries reaching back to 2021. Categories cover 報道発表 (press release), 記者会見 (press conference), 審議会等 (council), 国際関係 (international), イベント (event), 刊行物 (publication), 採用 (recruitment), 調達 (procurement), and その他 (other). Use this skill when the user wants to monitor regulatory announcements, council outcomes, supervisory guideline drafts, or other FSA disclosures relevant to financial institutions in Japan. Triggers on: "金融庁", "FSA", "報道発表", "監督指針", "パブコメ" (use only the FSA-side notice — public comment portal lookup is out of scope), "審議会", "金融庁新着", "金融庁ニュース", "金融行政方針".

7 installs
▌
Fsi Lens For Fisc · aws-samples bundle
Well-Architected FSI Lens for FISC (FSI Lens) knowledge base for evaluating Japanese financial (FSI) workloads on AWS against the AWS Well-Architected Framework and the FISC Security Guidelines (FISC 安全対策基準). Use this skill when reviewing or designing a financial workload against FISC practice standards (FISC 実務基準), mapping Well-Architected pillars (Operational Excellence, Security, Reliability) to FISC considerations, or answering questions about the FSI Lens best practices. Triggers: FSI Lens, FISC, 金融情報システムセンター, 安全対策基準, Well-Architected, ウェルアーキテクテッド, FISCOPS, FISCSEC, FISCREL, 実務基準.

3 installs
▌
Skill To Document · aws-samples bundle
Convert an Agent Skill into a formatted document (PDF, DOCX, or HTML). Use this skill when the user wants to generate a document from a specific Agent Skill's content, including its SKILL.md and referenced markdown files. Triggers on keywords: "skill to document", "スキルをドキュメント化", "ドキュメント生成", "スキルからPDF", "スキルからWord", "スキルからHTML", "generate document from skill", "convert skill to PDF", "convert skill to DOCX", "convert skill to HTML". Supports PDF (via fpdf2), DOCX (via python-docx), and HTML (built-in). All formats are always available. Defaults to HTML when no format is specified.

7 installs
▌
AWS Security Guard · aws-samples bundle
Pre-execution security guard for AWS operations. Detects security risks before executing AWS CLI commands, IaC code (CloudFormation/Terraform/CDK), or AWS resource creation/modification/deletion, and presents warnings with reasons and alternatives. Trigger keywords: "AWS resource creation", "AWS CLI", "CloudFormation", "Terraform", "CDK", "S3 bucket", "security group", "IAM policy", "RDS", "EC2", "AWSリソース作成", "セキュリティグループ", "IAMポリシー".

8 installs
▌
Fsi Banking Mobile · aws-samples bundle
Reference architecture for a resilient, event-driven mobile / online banking workload (モバイルバンキング / オンラインバンキング) on AWS, built as three AWS CDK stacks (React SPA frontend, serverless microservices backend, mock core-banking API). Demonstrates account opening, balance inquiry, and fund transfer using Event Sourcing, Transaction Outbox, Saga, and CQRS patterns on Lambda, DynamoDB, API Gateway, EventBridge, and SQS, with FISC compliance mapping. Use this skill when designing, explaining, or deploying a microservices-based banking workload, or when the user asks about resilience patterns, eventual consistency, or the BLEA for FSI mobile-banking sample (金融リファレンスアーキテクチャ日本版).

8 installs
▌
Fsi Genai Platform · aws-samples bundle
Reference architecture for building a Generative AI (生成AI) workload for financial institutions on AWS, based on the closed-network edition of the AWS Samples "Generative AI Use Cases (GenU)" application with financial-grade security customizations. Use this skill when designing, reviewing, or explaining a financial-services generative AI platform on AWS: RAG-based internal knowledge search, document drafting, customer-support assistance, chat/summarization/translation, image/video generation, closed-network (閉域) deployment, Amazon Bedrock, Amazon Bedrock Guardrails, Amazon Cognito authentication, CloudWatch monitoring dashboards, KMS encryption, and FISC (金融情報システムセンター) compliance mapping for the "BLEA for FSI / 金融リファレンスアーキテクチャ日本版" v1.6 GenAI asset.

4 installs
▌
Fsi Genai Usecases · aws-samples bundle
Case study of generative AI (生成AI) use cases for financial institutions from the BLEA for FSI (金融リファレンスアーキテクチャ日本版) reference architecture. Covers four concrete Amazon Bedrock-centered ユースケース: document/content review (RAPID), AI sales roleplay training, a multi-agent contract-assistant, and ATM fraud detection with Amazon Nova. Use this skill when designing, explaining, or implementing GenAI workloads for banks/insurers on AWS — e.g. Bedrock agents, multi-agent collaboration, Human-in-the-Loop document審査, compliance guardrails, or multimodal video analysis. Triggers: 生成AI, ユースケース, Bedrock, Nova, マルチエージェント, ロールプレイ, 文書審査, 不正検知, 契約書アシスタント.

4 installs
▌
Fsi Cyber Resilience · aws-samples bundle
Reference architecture and implementation guidance for cyber resilience in Japanese financial institutions (BLEA for FSI, サイバーレジリエンス). Covers logically air-gapped backup to an isolated Data Bunker account, cross-account restore to a fresh account, and automated network isolation of a compromised core-banking workload. Use this skill when designing or reviewing recovery from ransomware (ランサムウェア), DDoS, or other cyber events for financial workloads on AWS — including AWS Backup Logically Air-gapped Vault, RAM cross-account restore, GuardDuty-driven Network ACL isolation, and the FSA / FISC cyber-security guidelines that motivate them.

4 installs
▌
AWS Security Bulletins · aws-samples bundle
Fetch, search, and retrieve AWS Security Bulletins (vulnerability advisories and security announcements published by AWS). Use this skill when the user wants to check, search, list, or get details of AWS security bulletins, CVEs affecting AWS services, or AWS vulnerability disclosures. Trigger keywords: "security bulletin", "AWS CVE", "AWS vulnerability", "セキュリティ速報", "脆弱性情報", "AWS脆弱性", "security advisory".

7 installs
▌
Fsi Foundation Openapi · aws-samples bundle
Reference architecture and CDK samples for building financial Open API (オープンAPI) workloads on AWS, from the "BLEA for FSI / Financial Reference Architecture Japan" initiative. Use this skill when designing or deploying third-party-accessible bank APIs — including basic reference APIs (残高照会 / 株価照会) authenticated with Amazon Cognito + API Gateway, and financial-grade APIs (FAPI, 資金移動 / 売買指図) protected by mTLS and an OAuth2/OpenID Connect authorization server (Keycloak or Authlete). Covers FISC safety-standard mapping, multi-region DR design, and the two provided CDK samples (guest-openapi-base-sample and guest-openapi-fapi-sample). Trigger keywords: Open API, オープンAPI, FAPI, 金融グレードAPI, 認可サーバー, Keycloak, mTLS, 相互TLS, Cognito API.

6 installs
▌
Jp Security Advisories · aws-samples bundle
Fetch, search, and retrieve Japanese security advisories and vulnerability information from JPCERT/CC and the MyJVN API (IPA's structured advisory service that exposes IPA security alerts and JVN iPedia vulnerability data). Use this skill when the user wants to check, list, search, or get details of Japanese security advisories, CVE-related disclosures published in Japan, or coordinated vulnerability notices that may impact financial systems. Triggers on: "JPCERT", "JPCERT/CC", "IPA security", "MyJVN", "JVN", "JVN iPedia", "注意喚起", "重要なセキュリティ情報", "セキュリティアドバイザリ", "脆弱性情報", "国内セキュリティ動向", "CVE 日本語".

6 installs
▌
AWS Customer References · aws-samples bundle
Research AWS public customer case studies across multiple sources and organize the findings. Use this skill when an AWS partner or Solutions Architect is asked "is there a public case study for X?" and needs to search broadly — the official directory API, the AWS case-studies website, the official AWS YouTube playlist, and general web search — then de-duplicate and present the results. Also use when the user wants to read the details of a specific case study or video. Triggers on: "AWS事例", "AWS case study", "customer reference", "導入事例", "事例検索", "事例を探して", "公開事例はあるか", "success story", "活用事例".

4 installs
▌
Fsi Capital Market Data · aws-samples bundle
Reference architecture for a financial-institution market data (マーケットデータ) distribution system built on the "BLEA for FSI / 金融リファレンスアーキテクチャ日本版" baseline. The workload ingests, computes and distributes real-time market data (stock prices, FX rates, etc.) to internal and external clients over FIX, REST and WebSocket, using a three-tier Handler / Composer / Distributor design with Amazon Kinesis Data Streams for loose coupling. Use this skill when designing, explaining, deploying or FISC-mapping a market data feed / real-time data distribution workload on AWS (keywords: market data, マーケットデータ, market data distribution, Kinesis, FIX/REST/WebSocket, リアルタイム配信, データ配信).

6 installs
▌
Fsi Insurance Analytics · aws-samples bundle
Reference architecture case study for an insurance (保険 / 保険業) data analytics platform on AWS, based on real-world insurers (New York Life, Sun Life). Covers a lake house built on Amazon S3 and Amazon Redshift, a metadata-driven ingestion framework using Amazon Aurora and AWS Glue, Redshift Data Sharing for compute separation, and a micro-account strategy for PII/PHI isolation. Use this skill when designing or reviewing an insurance data platform, analytics workload, or multi-account data pipeline on AWS, or when answering questions about 保険ワークロードのデータ分析基盤, データレイク, レイクハウス, PII/PHI 保護, or マルチアカウント戦略 in the FSI reference architecture.

8 installs
▌
Customer Context Manager · aws-samples bundle
Manage customer-specific context that LLMs cannot know on their own — abbreviations, internal system names, org structures, key contacts, deal history, and relationship notes. Stores context as human-readable Markdown files organized per customer, following XDG Base Directory Specification. Loads the context a task needs, and updates it as new information surfaces. Use this skill when the user asks to look up, register, update, search or review stored customer context, or is preparing material for a specific customer and needs the accumulated background. Trigger keywords: "customer context", "顧客コンテキスト", "お客様情報", "顧客情報", "コンテキスト更新", "context update".

5 installs
▌
Fsi Payments Credit Card · aws-samples bundle
Reference architecture case study for a credit card issuer (イシュア) system built on the "BLEA for FSI / 金融リファレンスアーキテクチャ日本版" initiative. It describes how to incrementally migrate a mission-critical card payment / issuer workload from on-premises to AWS using a microservices, multi-region Active-Active design that handles high-TPS real-time Authorization and Reconciliation while keeping Settlement on-premises (Strangler Pattern). Use this skill when designing, explaining, or discussing a credit card issuer / card payment processing workload on AWS (keywords: credit card, クレジットカード, カード決済, イシュア, issuer, card payment, Authorization, Reconciliation, request hedging, リクエストヘッジ, PCI DSS).

6 installs
▌
Fisc To AWS Security Agent · aws-samples bundle
Deterministically generates source documents (Markdown) from the FISC "Security Guidelines on Computer Systems for Financial Institutions" (安対基準 / Antai Kijun) PDF for import into AWS Security Agent as Custom security requirements packs. It converts a ~36MB PDF to text, extracts standard items, selects workload-relevant technical controls, splits them into thematic packs (<=20 items and <=2MB each), and describes each item in the 5-field structure name/description/applicability/compliance/remediation. Use this skill when a user asks to "import the FISC安対基準 into Security Agent", "create FISC custom requirement packs", "convert the 安対基準 PDF for Security Agent", or Japanese equivalents such as 「FISC安対基準をSecurity Agentに取り込みたい」「FISCのカスタム要件パックを作りたい」「安対基準PDFをSecurity Agent用に変換して」. Output is reproducible; the same input always yields the same output.

5 installs
▌
Fsi Channel Contact Center · aws-samples bundle
Reference architecture for building a secure, compliant, and reliable omnichannel contact center (顧客チャネル / Customer Channel) for Japanese financial institutions on AWS, centered on Amazon Connect. Covers inbound/outbound voice, web chat/web calling, AI assistance (Amazon Q in Connect, Amazon Bedrock), call monitoring/compliance checks, multi-region DR, and FISC compliance mapping. Use this skill when designing, explaining, or deploying a financial contact center / コンタクトセンター / コールセンター workload, when mapping Amazon Connect controls to the FISC 安全対策基準, or when working with the BLEA for FSI guest-customer-channel-sample CDK.

4 installs
▌
Fsi Foundation Hybrid Cloud · aws-samples bundle
Reference architecture for hybrid financial workloads (ハイブリッド, オンプレミス連携) built on AWS Outposts in the "BLEA for FSI" v1.6 program. Use when designing or reviewing workloads that combine AWS cloud and on-premises / customer data centers via Outposts — e.g. low-latency securities trading systems (証券取引システム), mainframe peripheral / integration systems (メインフレーム周辺システム), data residency (データレジデンシー) requirements, or low-latency access to on-premises databases, and their FISC (金融情報システムセンター安全対策基準) compliance considerations.

5 installs
▌
AWS Payment Cryptography Guide · aws-samples bundle
Covers AWS Payment Cryptography (APC) adoption, design, and migration support for issuers, acquirers, PSPs, and network processors. Provides architectural guidance on HSM migration, PIN verification, PIN translation, key management, card issuance, merchant acquiring, and payment gateway integration. Includes PCI compliance considerations, cryptographic protocol references (DUKPT, TR-31, TR-34, ECDH), and decision frameworks for selecting APC capabilities. Trigger keywords: "Payment Cryptography", "HSM migration", "PIN verification", "PIN translation", "DUKPT", "TR-31", "TR-34", "ARQC", "CVV", "P2PE", "Select PIN", "ECDH", "card issuance", "merchant acquiring", "payment gateway"

5 installs
▌
Fsi Foundation Governance Base · aws-samples bundle
Shared multi-account governance baseline (ガバナンスベース / Governance Base) of the BLEA for FSI (金融リファレンスアーキテクチャ日本版) reference architecture. Establishes a secure, FISC-aligned foundation across an AWS Control Tower / AWS Organizations environment: guardrails (ガードレール / Control Tower コントロール), centralized logging (ログ集約), security-service enablement (Security Hub, GuardDuty, Config, CloudTrail, IAM Access Analyzer), security alerting, auto-remediation, and IAM baselines. Use this skill when designing, deploying, or explaining the governance base that every other FSI workload builds on, when mapping controls to FISC 安全対策基準実務基準, when working with the base-ct-guest / base-ct-logging CDK samples, or for Control Tower AFC auto-provisioning and non-Control-Tower setup.

5 installs
▌
Fsi Foundation Analytics Platform · aws-samples bundle
Reference architecture for a financial-grade Analytics Platform (データ分析プラットフォーム) built as a Simple data lake on AWS. It centers on an Amazon S3 data lake with a three-layer (raw / normalized / analytics) data placement, serverless ETL with AWS Glue orchestrated by AWS Step Functions, querying via Amazon Athena, and visualization with Amazon QuickSight. Use this skill when designing, reviewing, or building a scalable, cost-optimized, FISC-aligned data analytics foundation for a Japanese financial institution — keywords: データ分析プラットフォーム, データレイク, data lake, Simple data lake, Glue, Athena, QuickSight, ETL, 3層構造, FISC.

6 installs
▌
Fsi Foundation Mainframe Integration · aws-samples bundle
Reference architecture guidance for integrating on-premises mainframes with AWS in Japanese financial institutions (BLEA for FSI / 金融リファレンスアーキテクチャ日本版). Covers three data-integration patterns between a mainframe and AWS: data replication (AWS Mainframe Modernization Data Replication with Precisely), asynchronous messaging (IBM MQ HA / MQ cluster / multi-instance queue managers), and file transfer (HULFT, AWS Transfer Family). Use this skill when designing or reviewing mainframe-to-AWS data integration, discussing メインフレーム連携 / メインフレーム / データレプリケーション / 非同期メッセージング / ファイル転送 / IBM MQ / HULFT / Precisely, or mapping such workloads to the FISC Security Guidelines.

7 installs
▌
Ontology Wiki · aws-samples bundle
생성 전(pre-generation) grounding 레이어. 온톨로지 엔티티(Spec/ADR/Deployment/Agent/Skill/Incident/Budget/Risk)를 작성하기 전에 지식 그래프를 질의해 기존 정의·enum·전례·결정 이유를 확인함으로써 drift를 소스에서 차단한다. adr-0001-graphify-knowledge-wiki 결정에 따라 Graphify(MIT)를 런타임 질의 substrate로 사용하며, Graphify 미가용 시 raw 스키마/docs 읽기로 graceful degradation 한다.

4 installs
▌
Audit Trail · aws-samples bundle
모든 사용자 발화·agent 행동·phase 전환·gate 판정을 ISO 8601 타임스탬프와 함께 감사 로그에 기록한다. 사용자 입력은 축약·요약 없이 verbatim blockquote로 보존하며, SOC2·ISMS-P 감사 요구사항에 매핑되는 보존 정책(30·90·365일)을 프로젝트별로 선택한다. 모든 AIDLC skill이 호출 가능한 공통 감사 계층을 제공한다.

6 installs
▌
Wiki · aws-samples bundle
Skill

4 installs
▌
Slo Management · aws-samples
SLI 메트릭을 자동 수집하여 SLO 대비 추적하고, Error Budget 소진율에 따라 배포 게이트를 제어한다. 번다운 차트 생성, 예측 기반 SLO 위반 사전 경고, Error Budget 정책(freeze/slow-down/normal) 자동 적용을 수행하며 continuous-eval의 품질 게이트를 보완한다.

5 installs
▌
Continuous Eval · aws-samples
Ragas 기반 품질·안전 평가를 매 배포 직후와 매 1시간 cron으로 실행하여 faithfulness, answer relevance, context precision, toxicity, PII leakage 지표를 측정한다. Golden dataset 관리와 regression gate(baseline 대비 5%p 하락 시 차단)를 수행하며 autopilot-deploy의 canary gate에 사용된다.

4 installs
▌
Cost Governance · aws-samples
AWS Pricing과 Cost Explorer를 MCP로 조회하여 agent별 비용 귀속을 집계하고 예산 alert을 발행하며, 사용 패턴이 정당하면 Opus → Sonnet → Haiku 모델 다운그레이드를 권고한다. 월간 예산 ceiling을 초과할 것으로 예상되는 배포는 veto하여 autopilot-deploy의 pre-flight gate로 작동한다.

5 installs
▌
Autopilot Deploy · aws-samples
Agent 또는 skill의 프로덕션 배포를 canary 1% → 10% → 50% → 100% 4단계로 자동 진행한다. 각 단계는 continuous-eval 통과와 SLO 준수를 gate로 하며 circuit breaker가 SLO 위반을 감지하면 즉시 이전 단계로 자동 롤백한다. 100% 승격은 사람 승인이 필수다.

5 installs
▌
Vllm Serving Setup · aws-samples
Design, deploy, and tune vLLM v0.18.2 inference serving on EKS with PagedAttention v2, Multi-LoRA, FP8 KV Cache, Chunked Prefill, and Continuous Batching. Produces Helm values.yaml, PodMonitor, HPA, and kubectl validation steps for production agentic workloads.

5 installs
▌
Anomaly Detection · aws-samples
CloudWatch 메트릭과 Prometheus 시계열 데이터에서 통계적 이상 징후를 자동 탐지하여 incident-response의 입력 소스로 제공한다. 베이스라인 학습(7일 이동 평균 + 3σ), 다변량 상관 분석, 계절성 보정을 수행하며 탐지된 anomaly를 severity 분류하여 알람을 생성한다.

3 installs
▌
Incident Response · aws-samples
CloudWatch/Prometheus 알람을 수신하여 severity 분류, runbook 조회, hypothesis 생성, 진단 MCP 쿼리, 사람 승인 기반 remediation 수행까지 자동화한다. SEV1은 즉시 on-call 호출, SEV2/3은 agent가 drafted response를 준비한 뒤 사람 승인 후 실행한다.

6 installs
▌
User Stories · aws-samples
Conditionally generate user stories in As-a/I-want/So-that format only when changes are user-facing. Skips story generation for pure infrastructure or internal refactor work. Produces stories with acceptance criteria linked back to REQ-IDs.

5 installs
▌
Predictive Scaling · aws-samples
과거 트래픽 패턴과 시계열 예측을 기반으로 리소스 수요를 사전 예측하고 스케일링을 권고한다. 시간대별/요일별 계절성 분석, 이벤트 기반 수요 급증 예측, 비용 대비 성능 최적 구성 제안을 수행하며 cost-governance와 연동하여 예산 범위 내 스케일링을 보장한다.

5 installs
▌
Root Cause Analysis · aws-samples
인시던트 발생 시 관련 메트릭·로그·이벤트·변경 이력을 자동 수집하고 인과 관계를 추론하여 근본 원인을 식별한다. 타임라인 기반 이벤트 상관관계 분석, 변경-장애 매핑, 의존성 그래프 탐색을 수행하며 RCA 보고서를 자동 생성한다.

5 installs
▌
Self Improving Loop · aws-samples
Langfuse production trace를 관찰하고 품질 regression·비용 이상·실패 패턴을 자동 분석한 뒤 prompt·skill 수정안을 PR draft 형태로 제안한다. Observe → Analyze → Propose → PR 4단계 루프를 실행하며 self-improving-agent-loop ADR의 자동화 경계(Rollout/Score/Filter까지만 자동, Train/Deploy는 사람 승인)를 강제한다.

6 installs
▌
Agentic Eks Bootstrap · aws-samples
Bootstrap an AWS EKS cluster optimized for Agentic AI workloads — Karpenter v1.2+ GPU node pools, EKS Auto Mode, Kubernetes 1.32+ with DRA 1.35 GA, VPC CNI, GPU Operator, and baseline observability. Use when starting a new EKS cluster that will host vLLM, Inference Gateway, Langfuse, or Kagent.

4 installs
▌
AI Gateway Guardrails · aws-samples
Enforce Input/Output Guardrails at the LLM Gateway layer — PII redaction, Prompt Injection defense, Jailbreak detection, Toxicity filter, and Tool Allow-list. Integrates Bedrock Guardrails, NeMo Guardrails, Llama Guard 3, and regex/regex-ML policies on Bifrost/LiteLLM with Langfuse audit trail.

7 installs
▌
Containerization · aws-samples
Containerize legacy applications with production-grade defaults — multi-stage Dockerfile, docker buildx multi-arch (amd64/arm64), Trivy/grype security scanning, Health Check, non-root user, minimal base (distroless/alpine), ECR push automation, and ECS/EKS manifest templates. Use after to-be-architecture is approved and risk-discovery PASSes.

4 installs
▌
Cutover Planning · aws-samples
Plan production traffic cutover — Blue/Green, Canary (1%→10%→50%→100%), DNS-based strategies on ALB/Route53. Defines explicit rollback triggers (SLO violation, error rate, p99 latency), data synchronization via DMS zero-downtime migration, and post-cutover validation checklist. Use when containerization is done and production traffic needs to move from legacy to new environment.

3 installs
▌
Langfuse Observability · aws-samples
Self-host Langfuse v3.x on EKS (Web, API, Worker) with PostgreSQL, ClickHouse, Redis, and S3 backends. Wire an OpenTelemetry Collector pipeline that receives traces from vLLM, Bifrost/LiteLLM, and LangChain agents so token cost, latency, and quality scores are tracked end-to-end.

5 installs
▌
Automated Remediation · aws-samples
알려진 장애 패턴에 대해 사전 정의된 Runbook 기반 자동 복구를 실행한다. RCA 결과 또는 incident-response의 가설을 입력으로 받아 매칭되는 remediation playbook을 선택하고, 복구 전/후 상태를 검증하며, 실패 시 에스컬레이션한다. SEV2/3만 자동 복구 대상이며 SEV1은 사람 전용이다.

5 installs
▌
Gpu Resource Management · aws-samples
Design GPU orchestration on EKS using Karpenter v1.2+ NodePools, KEDA scale-to-zero, and DRA 1.35 GA for multi-instance GPU (MIG) partitioning. Right-size NodePool for p5/g6e/trn2 instance mix, spot/on-demand split, consolidation, and topology-aware scheduling.

6 installs
▌
Quality Gates · aws-samples
AIDLC 각 phase 종료 시점에 필수 gate 체크리스트를 강제한다. Inception gate는 요구사항·사용자 스토리·워크플로우 계획 서명을, Construction gate는 설계·코드·테스트 전수 통과와 risk-discovery PASS를, Operations gate는 continuous-eval 24시간 green과 cost-governance budget OK를 요구한다. 미통과 시 `.omao/state/gates/<phase>.json`에 blocked 상태를 기록하고 다음 phase 진입을 차단한다.

2 installs
▌
Test Strategy · aws-samples
Agentic 시스템을 위한 TDD 전략을 수립한다. LLM 클라이언트 mock(VCR-style), golden dataset 기반 eval(최소 5건), hypothesis 기반 property-based test로 비결정성을 제어한다. `.omao/plans/construction/test-plan.md`를 산출하며 code-generation과 병렬 실행 가능하다.

5 installs
▌
To Be Architecture · aws-samples
Design the target AWS architecture — ECS Fargate / EKS / Serverless choice, VPC topology with public-private-isolated subnets, managed database selection (RDS/Aurora/DynamoDB), IAM boundaries, and observability baseline (CloudWatch, X-Ray, Langfuse). Produces to-be-architecture.md with Mermaid diagram and compliance matrix. Use after modernization-strategy is approved.

3 installs
▌
Risk Discovery · aws-samples bundle
Construction 단계 실행 직전, Inception 아티팩트와 설계 문서를 교차 분석하여 12개 카테고리 기반 위험 체크포인트를 탐지한다. 비즈니스 연속성·보안·외부 통합·데이터 일관성·비용·성능·규제·가용성·장애 전파 반경·운영 복잡도·의존성 취약점·롤백 가능성을 각각 PASS/WARN/BLOCK으로 판정하고 BLOCK 항목은 다음 phase 진입을 차단한다.

5 installs
▌
Structured Intake · aws-samples bundle
AIDLC Inception 시작 시 자유 형식 발화 대신 구조화된 템플릿으로 프로젝트 정보를 수집한다. project-info 템플릿과 requirements 템플릿을 순차 생성하여 후속 workspace-detection·requirements-analysis·user-stories skill이 소비할 단일 진실원을 제공한다.

4 installs
▌
Workflow Planning · aws-samples
Strategic workflow planning for AIDLC Phase 1 close-out. Chooses sequential / parallel-units / iterative execution mode via a decision tree, maps stories to units, and defines checkpoint gates. Produces workflow-plan.md as the hand-off artifact to the aidlc plugin construction phase.

5 installs
▌
Workload Assessment · aws-samples
Assess legacy workloads before modernization — application dependency graph, database schema, traffic patterns, RTO/RPO, compliance constraints (ISMS-P/PCI-DSS), technical debt scoring, and Five Lenses readiness. Use when starting brownfield migration to AWS and need a data-driven baseline before selecting a 6R pattern.

2 installs
▌
Inference Gateway Routing · aws-samples
Configure kgateway v2.0+ as L1 and Bifrost v1.x or LiteLLM v1.60+ as L2 for a 2-Tier Inference Gateway on EKS. Apply Cascade Routing (Haiku→Sonnet→Opus fallback), Semantic Router (intent-based model pick), and HTTPRoute with OTel trace propagation to Langfuse.

3 installs
▌
Code Generation · aws-samples
승인된 design.md를 기반으로 스캐폴딩·인터페이스·데이터 모델·구현 코드를 단계별로 생성하고 모든 변경을 사람 승인 gate에 제출한다. 템플릿 기반 생성·롤백 스냅샷·계약 위반 감지로 안전성을 확보하며 auto-merge는 금지된다.

2 installs
▌
Component Design · aws-samples
Inception 아티팩트(requirements, user-stories, workflow-plan)를 입력으로 받아 agentic 시스템의 컴포넌트 경계·인터페이스 계약·데이터 모델을 설계하고 `.omao/plans/construction/design.md`를 생성한다. Agent·Tool·Memory·Gateway 경계를 명확히 나누고 후속 code-generation·test-strategy skill의 단일 진실원 역할을 한다.

5 installs
▌
Workspace Detection · aws-samples
Detect whether the workspace is greenfield (new project) or brownfield (existing codebase). For brownfield, trigger reverse-engineering to recover implicit requirements. Produces a workspace-report.md with detected stack, entry points, and recommended inception path.

4 installs

848 published skills · page 5 of 9