aws-backup-coverage-review

AWS Backup Coverage Review

Perform a structured, read-only coverage and posture review of AWS Backup in one account across all enabled Regions. The review answers one question precisely — which backup-eligible resources are actually recoverable, and which are not — then explains why each gap exists and how to close it.

Output Contract — read this before doing anything else

The only acceptable output of this skill is the full report defined in the Final Delivery Contract below. A conversational prose summary of the findings — however accurate, however well organised — is a failed run.

Every response must contain, in order: Scope (including Regions swept and not swept), Coverage Rating with a coverage percentage, Executive Summary, Coverage Matrix, Findings & Recommendations, a Check Coverage Matrix with all 23 rows, and Next Steps.

Three failure modes to avoid specifically, because all three feel natural in a chat:

• Do not compress the report into narrative bullets because the question was phrased casually. "What isn't being backed up?" requires the same full report as "run an AWS Backup coverage review".
• Do not substitute a direct lookup when the question is narrow. "Are my EBS volumes protected in us-east-1?" narrows the scope of the review; it does not authorise a different output. Narrow the sweep, then render the full report for that scope. See Scoped requests under the Final Delivery Contract — and Follow-up questions in the same conversation for the single exception, which applies only after a qualifying report has already been delivered in this conversation.
• Do not end with an offer to investigate further or to fix anything ("want me to dig into any of these?", "which gap would you like to tackle first?"). The report is the deliverable, complete on first response. Findings the review surfaces are already in it, each with a recommendation and an SLA bucket. In particular, never offer to "run the full coverage review" as a follow-up — if this skill loaded, the full review for the requested scope is the current response.