Skill UI

A comprehensive skill for analyzing AWS spending patterns and identifying areas of waste. It provides actionable strategies to reduce cloud costs by detecting idle resources (like unattached EBS volumes or unused Elastic IPs), recommending Reserved Instances, and generating reports using AWS CLI and Cost Explorer data.

Manage AWS identity and access with least-privilege policies, roles, federation, and permission boundaries. Covers creating roles for EC2, Lambda, ECS, cross-account access, OIDC for GitHub Actions, and auditing access. Includes best practices for security and IAM policy structure.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

Build and deploy serverless functions on AWS Lambda. Configure triggers like API Gateway, S3, and SQS. Manage IAM permissions and optimize performance for cold starts. Ideal for event-driven applications, scheduled tasks, and lightweight APIs. Includes deployment via CLI and SAM templates.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

Provision and manage Amazon RDS relational databases including PostgreSQL, MySQL, and SQL Server. Configure backups, replication, security, and monitoring using AWS CLI. Ideal for deploying production-grade managed databases with high availability and performance tuning.

Configure and secure Amazon S3 buckets using AWS CLI. Implement versioning, lifecycle rules, encryption, and access policies for production-grade object storage management. Ideal for DevOps and cloud infrastructure tasks.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

This skill enables building production-ready serverless applications on AWS. It covers core components like Lambda functions, API Gateway, and DynamoDB. It also includes event-driven patterns using SQS and SNS, deployment strategies with SAM or CDK, and optimization techniques for cold starts. Ideal for backend development and cloud-native architecture implementation.

This skill offers expert guidance for building serverless applications and event-driven architectures on AWS based on Well-Architected Framework principles. It covers Lambda functions, REST APIs, microservices, and asynchronous workflows. Key principles include designing for concurrency, stateless functions, and orchestration using Step Functions. Ideal for scalable, resilient cloud infrastructure design.

This skill covers AWS development focusing on infrastructure automation and cloud architecture patterns. It provides guidance and best practices for building scalable cloud solutions using AWS services. Suitable for tasks involving infrastructure as code, resource management, and architectural design within the AWS ecosystem.

Design and manage AWS Virtual Private Cloud (VPC) networking infrastructure for production environments. This skill covers subnet isolation, routing tables, security groups, and network segmentation. It includes configuring Internet Gateways, NAT Gateways, and VPC peering for multi-AZ architectures. Use AWS CLI to create VPCs, subnets, and gateways securely. Essential for DevOps engineers setting up secure cloud network foundations.