model-deployment

A workflow for generating deployment code for LoRA-fine-tuned Nova or open-source models trained through SageMaker Serverless Model Customization. Deployment makes a trained model available through SageMaker endpoints or Bedrock.

In plain words
What is it for?
Deploying supported fine-tuned models to SageMaker endpoints or Bedrock. It is for LoRA-tuned models from the specified SageMaker customization process, not base models or other fine-tuning methods.
Why use it?
It helps choose the supported deployment path based on the model and training setup. It also checks required SDK, region, role, and training-job details before generating code.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/awslabs/agent-plugins/model-deployment
Any agent
npx skills add awslabs/agent-plugins --skill model-deployment
Clone the repo
git clone --depth 1 https://github.com/awslabs/agent-plugins

Made for: Claude Code, Codex.

Per session 76 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,331 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00076 $0.01331
Opus 5 $0.00038 $0.00665
Sonnet 5 $0.00015 $0.00266
Haiku 4.5 $0.00008 $0.00133

Measured 2d ago against content hash f2778296c666, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

model-deployment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 4 executable files (code_templates/deploy-nova-bedrock.py, code_templates/deploy-nova-sagemaker.py, code_templates/deploy-oss-bedrock.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/sagemaker-ai/skills/model-deployment/SKILL.md · 131 lines

How it starts

The opening of the file, as written. The whole thing — 131 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Model Deployment

Identifies the correct deployment pathway based on model characteristics and generates deployment code.

Scope

This skill supports deploying Nova and OSS models that were fine-tuned through SageMaker Serverless Model Customization only.

Not supported:

  • Base models (not fine-tuned)
  • Models fine-tuned through other processes
  • Full Fine-Tuning (FFT) — only LoRA fine-tuned models are supported

Prerequisites

  • The SDK environment has been verified (SDK version, region, execution role). If not done, activate the sdk-getting-started skill first.

Principles

  1. One thing at a time. Each response advances exactly one decision.
  2. Confirm before proceeding. Wait for the user to agree before moving on. But don't re-ask questions already answered in the conversation — use what you know.
  3. Don't read files until you need them. Only read pathway references after the pathway is confirmed.
  4. Use what you know. If conversation history or artifacts already answer a question, confirm your understanding instead of asking again.

Workflow

Step 1: Identify the Training Job

You need the training job name or ARN. Check the conversation history first — the user may have already mentioned it, or it may be available from earlier steps in the workflow (e.g., fine-tuning). If not, ask the user.

Once you have the training job name or ARN, use the AWS MCP tool to look it up:

  1. Use the AWS MCP tool describe-training-job and extract:
    • S3 output path (from ModelArtifacts.S3ModelArtifacts or OutputDataConfig.S3OutputPath)
    • IAM role ARN (from RoleArn)
    • Region
  2. Use the AWS MCP tool list-tags on the training job ARN and extract:
    • Model ID from the sagemaker-studio:jumpstart-model-id tag
  3. Determine the model type from the model ID:
    • Contains "nova" (nova-micro, nova-lite, nova-pro) → Nova
    • Llama, Mistral, Qwen, GPT-OSS, DeepSeek, etc. → OSS

Unsupported models: This skill only supports OSS and Nova models that were LoRA fine-tuned through SageMaker Serverless Model Customization. If the model doesn't match, tell the user this skill can't help and suggest the finetuning skill.

Read the full file on GitHub · 131 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 131 lines · 76 tokens per session scan A f2778296c666

Subscribe to this mod's changes

model-deployment is a skill published in the GitHub repository awslabs/agent-plugins (876 stars, last pushed 5d ago), licensed Apache-2.0. It adds 76 tokens to every session and 1,331 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

redshift-support-specialist

Amazon Redshift domain expertise for query optimization, operational reviews, and cost optimization on provisioned clusters and Serverless workgroups. Use when a user asks about Redshift query tuning, slow queries, disk spill, distribution/sort key issues, a Redshift health check or operational review, or Redshift…

aws/tools-for-devops-agent · 88 tokens

database-rds-devops

Database-level data-plane diagnostics for Aurora MySQL and Aurora PostgreSQL. Executes predefined read-only health check queries via RDS Data API to analyze buffer pool, connections, locks, replication, storage, performance, and index efficiency. Requires the rds-aidba MCP server for database-internal access beyond…

aws/tools-for-devops-agent · 75 tokens

eks-operation-review

Comprehensive Amazon EKS operational review aligned with the AWS EKS Best Practices Guide. Use this skill when a user asks to review, audit, or assess EKS clusters for best practices compliance, operational readiness, security posture, cost optimization, reliability, networking, scalability, or upgrade readiness.…

aws/tools-for-devops-agent · 99 tokens

investigation-cost-guardrail

Cost guardrail for AWS DevOps Agent that covers ALL AWS services and native agent tools. Before the agent makes any paid API call, this skill estimates cost, enforces budgets per investigation, detects expensive operations across all services (Athena queries, S3 scans, DynamoDB scans, SageMaker inference, PromQL…

aws/tools-for-devops-agent · 105 tokens

cis-aws-foundations-3.2.3

Ensure that RDS instances are not publicly accessible.

CyberStrikeus/CyberStrike · 21 tokens

bedrock-adoption-readiness

Amazon Bedrock production readiness assessment covering IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability across Standard Bedrock and Mantle surfaces. Use this skill when a user asks to review Bedrock readiness, assess Bedrock security posture, evaluate quota headroom…

aws/tools-for-devops-agent · 137 tokens