Agent Toolkit for AWS is a collection of AWS-supported MCP servers, skills, plugins, commands, and hooks that help AI coding agents build, deploy, and manage applications on AWS. It is used by developers working with AWS services through agents such as Claude Code, Codex, Cursor, and Kiro. The catalogue entries are the toolkit's own agent extensions for AWS development and operations.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aws/agent-toolkit-for-aws --skill amazon-elasticachegit clone --depth 1 https://github.com/aws/agent-toolkit-for-awsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aws/agent-toolkit-for-aws/amazon-elasticache)<a href="https://agentmods.dev/skills/aws/agent-toolkit-for-aws/amazon-elasticache"><img src="https://agentmods.dev/badge/skills/aws/agent-toolkit-for-aws/amazon-elasticache/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aws/agent-toolkit-for-aws/amazon-elasticache"><img src="https://agentmods.dev/badge/skills/aws/agent-toolkit-for-aws/amazon-elasticache.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 73 Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.Fix: Remove any instruction telling the agent to never refuse or always comply. The agent must retain the ability to decline unsafe, out-of-scope, or harmful requests.
- medium Excessive Agency · line 98 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00222 | $0.04158 |
| Opus 5.5 | $0.00089 | $0.01663 |
| Sonnet 5.5 | $0.00044 | $0.00832 |
| Haiku 4.5 | $0.00022 | $0.00416 |
Grade A, and why
amazon-elasticache scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ElastiCache
A modular ElastiCache toolkit organized as a registry of sub-skills. Each sub-skill handles one domain of ElastiCache work. The router below matches user intent to the right sub-skill, then loads only the references needed for that sub-skill.
How this skill works
- Match the user's request against the semantic categories in the registry below. Match on meaning, not exact wording ("help me figure out which data structures to use" matches
data-modelingeven without the word "pattern"). - Disambiguation: If the user's intent matches multiple sub-skills, apply these rules in order:
- If
.elasticache/requirements.jsonexists withinfrastructure.endpointset, prefermonitoringordata-modeling(the user has an existing cache). - If no cache exists (no requirements.json or no endpoint), prefer
requirements. - If still ambiguous, ask one clarifying question: "Are you looking to set up something new, or troubleshoot something existing?"
- If
- Check the Guardrails section before recommending an engine or deployment model.
- Read
references/{sub-skill-id}/instructions.mdfor the matched sub-skill. If the file is not found at a relative path, check your prompt or environment for the skill directory absolute path and retry with{skill-directory}/references/{sub-skill-id}/instructions.md. - If the request spans multiple sub-skills, execute them in pipeline order.
- If a sub-skill requires upstream context (engine, deployment model, endpoint) not yet in session memory, route to the upstream sub-skill first.
- If no sub-skill matches, activate
requirementsfirst. - If a script or CLI call fails, show the error to the user and suggest a specific fix before retrying.
Sub-skill registry
Each entry has: an ID (directory name under references/), a domain description, semantic categories for matching, and upstream/downstream dependencies.
| ID | Name | Domain | Semantic Categories | Upstream | Downstream |
|---|---|---|---|---|---|
requirements |
Solution Fit | Gathers workload, stack, scale, latency, persistence, and budget through workspace scan + structured interview. Decides whether ElastiCache is the right service and hands off with a routing recommendation. | I need a cache, speed up my app, reduce database load, lower Bedrock cost, should I use ElastiCache, what's best for my workload, evaluating cache options, ElastiCache vs X, Valkey vs X, vague new workload | — | setup, data-modeling, genai, monitoring, migration |
setup |
Create and Connect | Provisioning, connectivity, security, authentication, IaC, deployment choice. Gets the user to a working cache with least friction. Covers engine selection, serverless vs node-based, VPC, TLS, RBAC/IAM, jump-host/SSM tunnels, CLI/SDK/CFN/CDK/Terraform starters. | create a cache, set up ElastiCache, provision, Valkey cluster, connect Lambda/ECS/EKS/EC2, VPC, security groups, TLS, RBAC, IAM auth, jump host, SSM tunnel, CloudFormation, CDK, Terraform, engine selection, serverless vs node-based, backup, snapshot, restore, export | requirements (optional) |
data-modeling, genai, monitoring |
data-modeling |
Application Patterns | Picks data structures, key schema, TTL strategy, invalidation approach, and client code for non-AI patterns: cache-aside, session store, rate limiting, leaderboards, counters, pub/sub, streams, shopping carts, job queues, activity feeds. | session store, rate limiting, leaderboard, cache-aside, query caching, counters, streams, pub/sub, shopping cart, job queue, activity feed, key schema, TTL, invalidation, data structures | setup (cache must exist) |
monitoring |
genai |
AI and Vector Workloads | Classifies request into Mode 1 (plain cache), Mode 2 (semantic response cache), or Mode 3 (full vector search). Selects Valkey and forces node-based Valkey 8.2 or above (recommend 9.0) when server-side vector similarity is needed. Covers semantic caching, agent memory, RAG retrieval, recommendation, personalization, conversation/session persistence for AI agents, and framework wiring (Strands, mem0, LangChain). | semantic cache, RAG, agent memory, conversational memory, vector search, embeddings, recommendation, personalization, Bedrock latency, Bedrock cost, LLM caching, Strands, mem0, LangChain, conversation history, AI session store, embedding provider, framework integration | setup (cache must exist) |
monitoring |
monitoring |
Operate and Observe | Diagnoses performance, cost, and reliability using metrics first, then recommends the smallest change. Covers dashboards, alarms, log delivery, cost reporting, event routing, troubleshooting high CPU / memory / replication lag / connection spikes / low hit rate / hot keys / big keys / slot imbalance / latency spike root cause. | cache is slow, cost too high, hit rate low, high CPU, memory pressure, replication lag, connection spikes, dashboards, alarms, CloudWatch, cost comparison, troubleshoot, hot key, uneven shard load, one node pinned, big key, memory bloat, which key is biggest, keyspace distribution, prefix analysis, cost attribution by tenant, memory imbalance, one shard full, slot memory skew, latency spike, slow command incident, root cause for latency bump | — | setup, migration |
migration |
Engine and Platform Migration | Selects the migration path and sequences preflight, validation, cutover, and rollback. Covers self-managed Redis → ElastiCache, Redis OSS → Valkey, node-based ↔ serverless, version upgrades. Hard validate-before-migrate gate. | migrate, Redis OSS to Valkey, self-managed to ElastiCache, node-based to serverless, serverless to node-based, engine upgrade, version upgrade, zero-downtime cutover, rollback | — | setup, monitoring |
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/examples/sample_commandstats.csv 882 B
- assets/examples/sample_input_simple.csv 449 B
- references/data-modeling/command-availability.md 6.1 KB
- references/data-modeling/common-patterns.md 8.6 KB
- references/data-modeling/instructions.md 9.9 KB
- references/data-modeling/memcached-recipe.md 5.2 KB
- references/data-modeling/recipe-gallery.md 8.2 KB
- references/genai/agent-memory.md 5.9 KB
- references/genai/elasticache-search.md 17 KB
- references/genai/embedding-providers.md 8.6 KB
- references/genai/framework-guide.md 4.9 KB
- references/genai/instructions.md 9.7 KB
- references/genai/rag-retrieval.md 9.3 KB
- references/genai/semantic-cache.md 8.9 KB
- references/genai/session-store.md 6.4 KB
- references/migration/auth-migration.md 14 KB
- references/migration/feature-comparison.md 11 KB
- references/migration/global-datastore-operations.md 8.0 KB
- references/migration/instructions.md 15 KB
- references/migration/rollback-procedures.md 17 KB
- references/migration/self-managed-migration.md 15 KB
- references/migration/sizing-assessment.md 6.8 KB
- references/migration/topology-validation.md 8.1 KB
- references/migration/upgrade-patching.md 13 KB
- references/migration/valkey-migration-guide.md 14 KB
- references/monitoring/alarm-packs.md 8.4 KB
- references/monitoring/big-key-hunter.md 6.8 KB
- references/monitoring/client-tuning-and-diagnostics.md 12 KB
- references/monitoring/cloudwatch-dashboards.md 7.7 KB
- references/monitoring/cost-reporting.md 12 KB
- references/monitoring/event-routing.md 9.5 KB
- references/monitoring/hot-key-detection.md 11 KB
- references/monitoring/instructions.md 8.8 KB
- references/monitoring/key-space-distribution-by-prefix.md 6.8 KB
- references/monitoring/log-delivery.md 7.9 KB
- references/monitoring/slot-memory-imbalance-detection.md 6.7 KB
- references/monitoring/slow-log-cross-signal-diagnosis.md 8.5 KB
- references/monitoring/troubleshooting.md 18 KB
- references/requirements/instructions.md 9.9 KB
- references/setup/auth-model-selector.md 3.3 KB
- references/setup/cluster-topology.md 3.6 KB
- references/setup/connection-guide.md 6.4 KB
- references/setup/connectivity-diagnostics.md 6.9 KB
- references/setup/create-secure-cache.md 8.4 KB
- references/setup/engine-selection.md 2.1 KB
- references/setup/iac-best-practices.md 7.3 KB
- references/setup/iac-reference.md 6.2 KB
- references/setup/iam-policies.md 2.7 KB
- references/setup/instructions.md 8.6 KB
- references/setup/serverless-vs-node.md 13 KB
- references/setup/service-quotas.md 2.9 KB
- references/shared-foundation/architecture-diagrams.md 8.0 KB
- references/shared-foundation/attribution.md 3.7 KB
- references/shared-foundation/boundary-doc.md 4.9 KB
- references/shared-runtime/api-gateway.md 5.4 KB
- references/shared-runtime/ecs.md 7.5 KB
- references/shared-runtime/eks.md 10 KB
- references/shared-runtime/lambda.md 10 KB
- references/shared-runtime/rds-acceleration.md 13 KB
- references/shared-runtime/secret-injection.md 14 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 136 lines · 222 tokens per session scan A 1cfa793c277f
amazon-elasticache is a skill published in the GitHub repository aws/agent-toolkit-for-aws (2,886 stars, last pushed yesterday), licensed Apache-2.0. It adds 222 tokens to every session and 4,158 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
pinecone
Managed vector DB for production RAG and search.
haven-db
Reset, reseed, locate and prune a haven stack's databases with haven db, and know which verbs destroy data. Use when someone says 'haven db', 'reset the database', 'drop the database', 'reseed in place', 'db preset', 'demo preset', 'database url', 'connection string for postgres', 'haven db prune', 'haven seed'…
redis-js
Work with the Upstash Redis JavaScript/TypeScript SDK for serverless Redis operations. Use for caching, session storage, rate limiting, leaderboards, full-text search (querying, filtering, aggregating with @upstash/redis search extension), and all Redis data structures. Supports automatic serialization/deserialization…
using-redis-token-buckets
Use when adding a bucket-like rate limit backed by Redis: a per-caller budget with burst capacity and continuous refill, a refund path for requests that did no work, or a limit whose Retry-After must be a real wait rather than a window edge. posthog/tokenbucket.py provides an atomic Lua token bucket (consume, refund…
byted-milvus
Manages Milvus on Volcano Engine (Volcengine): provision/inspect/scale/delete clusters and run collection + CRUD/search operations via bundled CLIs. Use when the user mentions Milvus + Volcengine/Volcano Engine or asks to operate Milvus there.
redis-best-practices
Redis development best practices for caching, data structures, and high-performance key-value operations.