Skill UI

An expert resource for developing highly reusable, production-grade cloud infrastructure using AWS Cloud Development Kit (CDK) in languages like TypeScript, Python, or Java. This guide provides established patterns for common services (e.g., Serverless APIs, ECS, Data Pipelines), focusing on best practices such as implementing least privilege, separating stateful resources, and ensuring monitoring via CloudWatch.

Automates CloudWatch alarm setup by providing best-practice guidance, sample configurations, and validation for AWS compute, storage, networking, and serverless workloads.

Automates configuring and aggregating infrastructure metrics across compute, storage, network, containers, load balancers, and databases with Prometheus, Datadog, or CloudWatch for dashboards and capacity tracking.

A comprehensive guide on implementing AWS CloudTrail log analysis for robust security monitoring, threat detection, and forensic investigation. Learn how to configure CloudTrail, use Amazon Athena for SQL querying, and leverage CloudWatch Logs Insights and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity across AWS services.

This guide provides a comprehensive framework for debugging and analyzing AgentCore runtime sessions using CloudWatch Logs Insights. It details advanced techniques like OpenTelemetry (OTEL) span correlation, resolving session IDs to trace IDs, and structuring complex query queries. Use this when investigating agent execution flows, diagnosing tool call failures, analyzing latency, or building detailed behavioral timelines.

This skill provides a comprehensive framework for setting up robust observability for Navan API integrations in production environments. It guides users through implementing structured logging, tracking request latency, classifying various errors (auth, rate limit, server), and monitoring the OAuth token refresh lifecycle. Includes practical steps and YAML examples for configuring alerts and building dashboards in platforms like Datadog, CloudWatch, or Prometheus/Grafana.

This workflow systematically analyzes deployed AWS resources and Infrastructure-as-Code (IaC) definitions. It collects usage metrics from CloudWatch and Cost Explorer to identify over-provisioning, unused resources, and inefficient configurations (e.g., right-sizing EC2, S3 lifecycle policies). It generates actionable cost optimization recommendations and creates structured GitHub issues for tracking and implementing savings.

This comprehensive workflow analyzes the health status of various AWS resources (EC2, Lambda, RDS, DynamoDB, etc.). It uses AWS CLI to diagnose potential issues by analyzing CloudWatch logs, metrics, and performance data. The process culminates in classifying root causes and generating actionable, tiered remediation plans (Immediate, Short-term, Long-term) to ensure system resilience and stability.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.

A comprehensive set of reusable patterns for structured incident triage in AWS environments. Includes pre-built Logs Insights queries for detecting errors, latency spikes, cold starts, and OOM events. Also provides systematic correlation methods linking CloudWatch alarms to deployment events, and a decision tree to narrow the blast radius scope from account to resource.

This skill provides expert guidance for AWS cost optimization, monitoring, and operational excellence. It helps analyze AWS bills, estimate costs before deployment, set up CloudWatch alarms, query logs, and audit CloudTrail activity. Users can optimize spending, monitor infrastructure performance, and assess security posture using integrated MCP servers for pricing, cost explorer, and observability.

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.