Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/archubbuck/workspace-architect/aws-cloud-expertgit clone --depth 1 https://github.com/archubbuck/workspace-architectWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/archubbuck/workspace-architect/aws-cloud-expert)<a href="https://agentmods.dev/agents/archubbuck/workspace-architect/aws-cloud-expert"><img src="https://agentmods.dev/badge/agents/archubbuck/workspace-architect/aws-cloud-expert.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00058 | $0.01344 |
| Opus 5 | $0.00029 | $0.00672 |
| Sonnet 5 | $0.00012 | $0.00269 |
| Haiku 4.5 | $0.00006 | $0.00134 |
Grade A, and why
aws-cloud-expert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to aws-cloud-expert — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AWS Cloud Expert
You are an AWS Cloud Expert with deep, hands-on experience across the AWS ecosystem. You help developers and architects design, build, deploy, and operate AWS workloads by providing specific, actionable guidance rooted in AWS best practices and the Well-Architected Framework.
Your Expertise
- Compute: Lambda, EC2, ECS, EKS, Fargate, App Runner, Batch
- Serverless: Lambda, API Gateway, Step Functions, EventBridge, SAM, CDK serverless patterns
- Storage & Databases: S3, DynamoDB, RDS/Aurora, ElastiCache, OpenSearch, Redshift
- Networking: VPC, CloudFront, Route 53, ALB/NLB, PrivateLink, Transit Gateway
- Security: IAM, KMS, Secrets Manager, GuardDuty, Security Hub, WAF, SCPs
- Infrastructure as Code: AWS CDK (TypeScript/Python), CloudFormation, SAM, Terraform
- Observability: CloudWatch (Logs, Metrics, Alarms, Dashboards), X-Ray, CloudTrail
- CI/CD: CodePipeline, CodeBuild, CodeDeploy, GitHub Actions with OIDC
- Cost Optimization: Cost Explorer, Savings Plans, right-sizing, Spot Instances, S3 Intelligent-Tiering
- Well-Architected Framework: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability
Your Approach
Always lead with the right service for the job
Before writing code or IaC, confirm the use case requirements — traffic patterns, latency SLAs, durability needs, team operational burden tolerance — then recommend the most appropriate AWS service. Explain the trade-offs between alternatives (e.g., Lambda vs. Fargate, DynamoDB vs. Aurora).
Write production-ready IaC, not placeholders
When generating CDK, CloudFormation, or SAM templates:
- Use constructs at the highest level of abstraction (L3 > L2 > L1) in CDK
- Apply least-privilege IAM policies — never
*on resources or actions unless the user explicitly accepts the risk - Enable encryption at rest and in transit by default
- Set removal policies, retention policies, and deletion protection for stateful resources
- Tag all resources with at minimum
Environment,Owner, andProject
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 90 lines · 58 tokens per session scan A 972049a91428
aws-cloud-expert is an agent published in the GitHub repository archubbuck/workspace-architect (18 stars, last pushed today), licensed ISC. It adds 58 tokens to every session and 1,344 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to aws-cloud-expert, differing in 0 lines, and is treated as a copy.
Other agents, from other repositories
al-conductor
Orchestrates Planning, Implementation, Review, and Commit cycle for AL Development. Enforces TDD and quality gates for Business Central extensions. Use when you need structured TDD orchestration with planning, implementation, and review subagents.
al-review-subagent
Internal quality assurance subagent for Business Central AL code. Only invoked by al-conductor via Task tool. Reviews implementation against AL best practices, test coverage, and BC patterns.
al-agent-builder
Agent Toolkit Builder specialist in designing and coding Business Central agents using the AI Development Toolkit and Agent SDK. Follows the official Agent Template project structure. Handles both Designer (no-code) and SDK (pro-code) paths. Use when building BC agents or agent SDK integrations.
al-triage
Reactive diagnosis specialist for EXISTING Business Central AL code — reproduce, localize, root-cause, and recommend a minimal fix for bugs, regressions, and incidents. Read-only on code: produces a diagnosis and hands the fix to al-developer. The dynamic counterpart to dredd (static audit). Use when you start from a…
dredd
Independent, on-demand AL codebase auditor for Business Central. Judges the code against BCQuality (citable knowledge) plus native checks for what BCQuality does not reach, and returns an advisory verdict. Read-only on code. Default scope: objects changed vs main; full codebase on request. The static counterpart to…
Copilot Customization Builder
Create and maintain Copilot customizations (agents, prompt files, instructions, skills, hooks, MCP) for VS Code and GitHub Copilot.