S3 resiliency, security, and data protection review. Assesses one or many S3 buckets across nine dimensions — versioning, replication, object lock, encryption, block public access, bucket policy, ownership controls, server access logging, and static website hosting — using read-only control-plane API calls, then…
ALWAYS use this skill in the beginning of any incident investigation, root cause analysis, or operational troubleshooting. This skill retrieves and analyzes AWS Support cases (open and resolved) to find historical incidents with similar symptoms, error patterns, or affected services. Activate this skill when…
Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected network traffic, crashes, or cost spikes - to determine whether it is a purely operational issue or a security incident, using the affected resource's security…
Use this skill when diagnosing IAM and access failures for Bedrock and SageMaker. It traces the authorization chain — caller identity, iam:PassRole, trust policy, role permissions, resource policies, SCPs — to name the denying hop and propose a scoped policy. Read-only. Use when a Bedrock or SageMaker call fails on…
Use this skill when a user asks to assess, plan, or validate an Amazon EKS cluster upgrade. Activate on requests mentioning "EKS upgrade", "Kubernetes version upgrade", "upgrade readiness", "upgrade plan", "pre-upgrade check", "version skew", "deprecated API", "addon compatibility", "node group upgrade", "control…
Validates and bootstraps Amazon Bedrock AgentCore observability so customers can trace agent reasoning, detect silent failures, and measure performance before an outage. Use this skill when a user asks to check, validate, audit, verify, fix, or set up AgentCore observability, tracing, metrics, or logging - for example…
Comprehensive Amazon Bedrock review aligned with the AWS Well-Architected Framework and Bedrock best practices. Use this skill when a user asks to review, audit, or assess Amazon Bedrock workloads for best-practices compliance, security posture, performance, cost optimization, service quotas, or resilience. Triggers…
Analyze and troubleshoot AWS routing and BGP path selection - how AWS chooses a network path, why traffic takes an unexpected route, and how to steer it. Use for AWS Cloud WAN route evaluation and CNE path selection; Direct Connect Gateway (DXGW) path selection and local vs remote region preference; Transit Gateway…
Performs a comprehensive Amazon ECS operations review across the 6 review pillars (Resiliency & HA, Observability, Security, Operations, Performance, Additional Analysis) using read-only AWS APIs, with a 7-day CloudWatch metrics baseline, recommended alarm thresholds for IDR onboarding, per-pillar PASS/FAIL/N/A…
Read-only SLA-readiness, availability, and cost review of Amazon FSx for Windows File Server. Assesses one or many file systems across seven dimensions — deployment type (Single-AZ vs Multi-AZ), Active Directory health, throughput sizing, storage headroom, backups, maintenance window, and CloudWatch alarms — and…
AWS Backup coverage and data protection posture review. Determines which backup-eligible resources are protected by AWS Backup and which are not, across all enabled Regions of an account, then evaluates backup plan frequency and retention, cross-Region and cross-account copies, vault encryption and Vault Lock, and…
Use this skill when someone wants an Amazon EKS cluster graded against best practices. Use it when they ask to review, assess, audit, or grade a cluster; ask for an operations review, security review, operational-readiness or pre-upgrade check, inventory, or CWR; ask whether a cluster is production-ready or safe to…
Amazon SageMaker AI Operational Review. Use this skill when a user asks to review, audit, or assess Amazon SageMaker AI workloads (endpoints, training jobs, pipelines, notebooks, Studio domains) for best-practices posture across Security, Performance, Cost Optimization, Service Quotas, Resiliency, Operational…
Report what the AWS DevOps Agent itself costs to run, and where that cost comes from, per Agent Space and per role on demand in chat or on a schedule through a custom agent. Use this skill when a user asks to measure, break down, attribute, explain, or forecast DevOps Agent spend, or the cost of the downstream AWS API…
Use this skill for GPU training or inference clusters on SageMaker HyperPod (Slurm or EKS), ParallelCluster, or self-managed EC2/EKS GPU instances. It adds three things. First, a GPU evidence coverage audit that proves per node whether kernel Xid logs and HyperPod health-agent detections were actually arriving, hour…
Identify and quantify AWS CloudTrail cost optimization opportunities. Use this skill when a user asks to reduce, review, audit, or optimize CloudTrail spend, or reports an unexpected CloudTrail cost or usage increase. Activate on requests like "why is my CloudTrail bill so high", "reduce CloudTrail costs", "find…
Identify and quantify AWS Config cost optimization opportunities. Use this skill when a user asks to reduce, review, audit, or optimize AWS Config spend, or reports an unexpected AWS Config cost or configuration-item increase. Activate on requests like "why is my AWS Config bill so high", "reduce Config costs", "AWS…
Comprehensive Amazon Data Firehose (formerly Kinesis Data Firehose) review aligned with the AWS Well-Architected Framework and Firehose best practices. Use this skill when a user asks to review, audit, or assess Amazon Data Firehose delivery streams for best-practices compliance, security posture, reliability…
Identify and quantify Amazon GuardDuty cost optimization opportunities. Use this skill when a user asks to reduce, review, audit, or optimize GuardDuty spend, or reports an unexpected GuardDuty cost increase or an expensive protection plan. Activate on requests like "why is my GuardDuty bill so high", "reduce…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: