Skill UI

This skill provides comprehensive guidance for developing AWS infrastructure using the Cloud Development Kit (CDK). It supports TypeScript and Python, helping users create new stacks, refactor existing infrastructure, and implement Lambda functions. It includes best practices for resource naming, pre-deployment validation using cdk-nag, and integration with MCP servers for AWS knowledge access. Ideal for cloud architects and developers building scalable serverless applications.

Configure AWS CloudTrail to enable organization-wide audit logging for compliance and security investigation. This skill covers setting up S3 buckets for log storage, applying security policies, enabling encryption, and creating trails for multi-region activity. It includes configuring event selectors for management and data events, and setting up CloudWatch alarms for unauthorized API calls to meet standards like SOC 2 or HIPAA.

This tool automates compliance validation against industry standards including CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 benchmarks. It helps validate AWS configurations, prepare for audits, and maintain continuous compliance monitoring. Users can generate reports and check specific regulatory requirements efficiently.

This skill provides comprehensive scripts and workflows to automatically identify and remove unused AWS resources across multiple services (EBS, S3, EC2, EIPs). By automating the cleanup of orphaned volumes, old snapshots, and stale data, users can eliminate cloud waste, significantly optimizing their AWS expenditure and ensuring a cost-efficient infrastructure.

This skill provides expert guidance on AWS cost optimization, monitoring, and operational excellence. It integrates MCP servers for cost estimation, analysis, CloudWatch metrics, alarms, and security auditing. Use it to analyze bills, estimate deployment costs, set up observability, and assess security posture effectively.

Practical FinOps controls to reduce AWS spend: rightsizing, autoscaling, Savings Plans and Reserved Instance planning, storage lifecycle policies, budget and anomaly alerts, and cleanup of idle resources using AWS CLI.

A comprehensive skill for analyzing AWS spending patterns and identifying areas of waste. It provides actionable strategies to reduce cloud costs by detecting idle resources (like unattached EBS volumes or unused Elastic IPs), recommending Reserved Instances, and generating reports using AWS CLI and Cost Explorer data.

Manage AWS EC2 instances, AMIs, auto-scaling groups, launch templates, and security configurations. Use for deploying and scaling compute resources on AWS.

This skill enables deploying containerized applications on Amazon ECS using Fargate serverless compute or EC2 launch types. It covers configuring task definitions, services, load balancing, and managing deployment strategies like rolling updates. Prerequisites include AWS CLI, Docker, and specific IAM permissions. Ideal for serverless container workloads on AWS infrastructure.

Manage AWS identity and access with least-privilege policies, roles, federation, and permission boundaries. Covers creating roles for EC2, Lambda, ECS, cross-account access, OIDC for GitHub Actions, and auditing access. Includes best practices for security and IAM policy structure.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

Build and deploy serverless functions on AWS Lambda. Configure triggers like API Gateway, S3, and SQS. Manage IAM permissions and optimize performance for cold starts. Ideal for event-driven applications, scheduled tasks, and lightweight APIs. Includes deployment via CLI and SAM templates.