agentmods.dev

azure-to-aws

azure-to-aws is a skill for Claude Code from aws/agent-toolkit-for-aws. It costs 239 tokens per session (5,106 once invoked), scanned A, original, Apache-2.0.

A guided workflow for moving workloads from Microsoft Azure, Microsoft's cloud service, to AWS. It maps Azure services such as App Service, AKS, virtual machines, Azure SQL, and Azure OpenAI to AWS alternatives.

In plain words
What is it for?
Use it to plan migrations such as App Service to Elastic Beanstalk, AKS to EKS, virtual machines to EC2, Azure databases to RDS, Redis to ElastiCache, or Azure AI to Bedrock.
Why use it?
It helps translate an existing Azure environment into AWS without requiring you to design every replacement from the beginning. It also distinguishes between matching the existing setup and choosing a more substantial redesign.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the aws-startup-advisor plugin — 12 skills, 1 command, 7 agents shipped together

not rated 2.9krepo +51 changed 6d ago A scan 239 tokens original Apache-2.0

Good fit Use it to plan migrations such as App Service to Elastic Beanstalk, AKS to EKS, virtual machines to EC2, Azure databases to RDS, Redis to ElastiCache, or Azure AI to Bedrock.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/aws/agent-toolkit-for-aws/azure-to-aws
View source ↗ aws/agent-toolkit-for-aws
About the project

Agent Toolkit for AWS is a collection of AWS-supported MCP servers, skills, plugins, commands, and hooks that help AI coding agents build, deploy, and manage applications on AWS. It is used by developers working with AWS services through agents such as Claude Code, Codex, Cursor, and Kiro. The catalogue entries are the toolkit's own agent extensions for AWS development and operations.

aws/agent-toolkit-for-aws · 2,886 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add aws/agent-toolkit-for-aws --skill azure-to-aws
Clone the repo
git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws

Made for: Claude Code.

Or install aws-startup-advisor, the plugin that ships this one along with the rest of its 12 skills, 1 command, 7 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for azure-to-aws

README.md
[![agentmods](https://agentmods.dev/badge/skills/aws/agent-toolkit-for-aws/azure-to-aws/github.svg)](https://agentmods.dev/skills/aws/agent-toolkit-for-aws/azure-to-aws)
Your own site
<a href="https://agentmods.dev/skills/aws/agent-toolkit-for-aws/azure-to-aws"><img src="https://agentmods.dev/badge/skills/aws/agent-toolkit-for-aws/azure-to-aws/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for azure-to-aws

Your own site · 80×15
<a href="https://agentmods.dev/skills/aws/agent-toolkit-for-aws/azure-to-aws"><img src="https://agentmods.dev/badge/skills/aws/agent-toolkit-for-aws/azure-to-aws.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 239 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,106 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00239 $0.05106
Opus 5.5 $0.00096 $0.02042
Sonnet 5.5 $0.00048 $0.01021
Haiku 4.5 $0.00024 $0.00511

Measured 6d ago against content hash b206cd28ac37, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

azure-to-aws scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

plugins/aws-startup-advisor/skills/azure-to-aws/SKILL.md · 274 lines

How it starts

The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Azure-to-AWS Migration Skill

Build status. Discover, Clarify, Design, Estimate, Generate, and the what-if workshop are implemented. A ## Status block records which build step filled a file in. It is not a signal to skip the file or to treat its body as a stub. Still missing: Bicep, ARM templates, and RDfA; the feedback sidebar (wiring only); and patterns.md, licensing.md, and gpu-hpc.md. The live az capture path is implemented (discover-live.md). OpenAI, OpenRouter, and Anthropic usage-API discovery (interactive, consent-gated, main-window — same shape as discover-live.md's pre-dispatch live-az capture) is implemented.

Optional usage telemetry

Before starting or resuming, load references/vendored/telemetry/PROTOCOL.md and run its read-only status check. Use the returned reporting mode rather than the model's identity. Complete the existing notice exchange only when that protocol requires it; unavailable or declined telemetry never blocks this skill.

Philosophy

  • Re-platform by default: pick the AWS service that matches the Azure workload type (App Service → Elastic Beanstalk, AKS → EKS, VMs → EC2, Flexible Server → RDS/Aurora, Azure Cache for Redis → ElastiCache). Re-architecting is a user decision, not a default.
  • Do not recommend AWS App Runner (no longer accepting new customers as of April 2026). App Service maps to Elastic Beanstalk by default, with Fargate as the override for direct container control and EKS for teams that already run Kubernetes. ECS Express Mode may be mentioned only as a forward-look on the Fargate override path.
  • Live-first discovery, read-only and consent-gated: the user's authenticated az CLI is a first-class source — most startups have no azurerm_* Terraform, and the tenant is authoritative for what actually runs. The live-az capture path is implemented (discover-live.md): consent + read-only az resource list/list capture run as main-window pre-work, and a file-only fragment parses the capture into the same inventory contract as the Terraform path (a live-only workspace no longer halts — it discovers). Resource Discovery for Azure (RDfA) is offered as the accuracy upgrade when right-sizing dollars matter, and recommended outright above roughly a handful of subscriptions. Live capture is strictly read-only, never captures app-setting or connection-string VALUES, and never mints a token.
  • Holistic first, per-resource second: the report leads with cluster-level architecture rationale. A 40-row per-resource mapping table is an appendix, not the headline.
  • Pre-determined where there is no ambiguity: an architecture-invariant primitive (Blob → S3, VNet → VPC) is a deterministic table lookup and never routed through a rubric that could reason its way somewhere else. A pattern may narrow the rubric's candidate set; a pattern may never change a deterministic mapping's target.
  • Dev sizing unless specified: default to development-tier capacity (single AZ, db.t4g.micro-class). Upgrade only on user direction or on measured utilization.
  • x86_64 is the default architecture here, not Graviton: Azure fleets carry Windows and .NET far more often than GCP or Heroku fleets do, and references/shared/graviton.md's escape path (Windows, .NET Framework, GPU/CUDA, RDS SQL Server) fires routinely. Graviton is offered as an optimization, not assumed.
  • Startup-weighted, not enterprise-weighted: Azure Database for PostgreSQL/MySQL Flexible Server and Cosmos DB Core API get full depth. Azure SQL Database / Managed Instance / SQL-on-VM, Azure Hybrid Use Benefit licensing, elastic-pool consolidation, and Synapse sit behind specialist gates that fire only on detection.
  • No human one-time migration costs: do not present human labor, professional services, or people-time as dollar estimates or a "one-time migration cost" budget line. Vendor charges grounded in data (Azure invoice line items in the baseline) are allowed.
  • Generate is opt-in: Design and Estimate always run. Terraform, migration scripts, and docs are produced only after the user chooses Execute at the post-Estimate decision gate (run_mode: decide_and_execute).

Read the full file on GitHub · 274 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · +21 lines b206cd28ac37
  2. 8d ago Changed · +7 lines 8a4a5b4c6a30
  3. 13d ago Changed · +22 lines a671856f5de2
  4. 16d ago Changed · -1 tokens per session 648cc7eabd09
  5. 17d ago Changed · +2 lines 9e83639b09d1
  6. 20d ago First seen · 222 lines · 240 tokens per session scan A 512b30735f58

Subscribe to this mod's changes

azure-to-aws is a skill published in the GitHub repository aws/agent-toolkit-for-aws (2,886 stars, last pushed yesterday), licensed Apache-2.0. It adds 239 tokens to every session and 5,106 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-26.

CloudDevOps and cloud
Related

Other skills, from other repositories

gke-compute-classes

Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…

google/skills · 83 tokens

gke-reliability

Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability, setting up PDBs, or configuring GKE health probes (liveness, readiness, startup). Don't use for generating K8s YAML manifests (use gke-manifest-generation) or disaster recovery…

google/skills · 85 tokens

gke-workload-security

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (auditcluster.sh), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (gVisor), enforcing Pod…

google/skills · 171 tokens

cloud-architect

Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost…

Jeffallan/claude-skills · 71 tokens

nemo-automodel-launcher-config

Configure NeMo AutoModel job launches for interactive runs, Slurm clusters, and SkyPilot cloud execution.

NVIDIA/skills · 30 tokens

azure-mgmt-botservice-dotnet

Azure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".

microsoft/skills · 78 tokens