Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add eliecer2000/kiro-bootstrap --skill aws-architecturegit clone --depth 1 https://github.com/eliecer2000/kiro-bootstrapWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/eliecer2000/kiro-bootstrap/aws-architecture)<a href="https://agentmods.dev/skills/eliecer2000/kiro-bootstrap/aws-architecture"><img src="https://agentmods.dev/badge/skills/eliecer2000/kiro-bootstrap/aws-architecture/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/eliecer2000/kiro-bootstrap/aws-architecture"><img src="https://agentmods.dev/badge/skills/eliecer2000/kiro-bootstrap/aws-architecture.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.01895 |
| Opus 5 | $0.00018 | $0.00948 |
| Sonnet 5 | $0.00007 | $0.00379 |
| Haiku 4.5 | $0.00004 | $0.00189 |
Grade A, and why
aws-architecture scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AWS Architecture
Skill para decisiones de arquitectura AWS-first, patrones serverless, event-driven, límites de servicios, segmentación por perfil, Well-Architected Framework y diseño de sistemas escalables.
Principios fundamentales
- Serverless-first: preferir servicios gestionados (Lambda, DynamoDB, SQS, EventBridge, Step Functions) sobre infraestructura auto-gestionada (EC2, ECS) salvo justificación técnica clara.
- Event-driven por defecto: desacoplar componentes con eventos asíncronos. Comunicación síncrona solo cuando el cliente necesita respuesta inmediata.
- Diseñar para fallos: todo componente puede fallar. Implementar retries con exponential backoff, circuit breakers, dead-letter queues y timeouts explícitos.
- Least privilege: cada componente tiene solo los permisos mínimos necesarios.
- Infraestructura como código: toda infraestructura se define en CDK o Terraform. Cero recursos creados manualmente en consola.
Pilares del Well-Architected Framework aplicados
Excelencia operacional
- Automatizar deployments con CI/CD (CodePipeline, GitHub Actions).
- Runbooks documentados para incidentes comunes.
- Feature flags para rollouts graduales.
- Observabilidad desde día 1: logs estructurados, métricas custom, trazas distribuidas.
Seguridad
- Cifrado en tránsito (TLS 1.2+) y en reposo (KMS) por defecto.
- IAM roles con políticas inline mínimas, nunca
*en Resource salvo excepciones documentadas. - Secrets en SSM Parameter Store (SecureString) o Secrets Manager, nunca en variables de entorno planas.
- VPC solo cuando se necesita acceso a recursos privados (RDS, ElastiCache). Lambdas sin VPC por defecto.
Fiabilidad
- Multi-AZ por defecto en servicios que lo soporten.
- DLQ en toda cola SQS y suscripción SNS.
- Retry policies configuradas en Step Functions, EventBridge rules y Lambda event source mappings.
- Idempotencia en todos los handlers que procesan eventos (usar Powertools idempotency).
Eficiencia de rendimiento
- Right-sizing de Lambda: empezar con 256MB, medir con Powertools y ajustar.
- Provisioned concurrency solo para endpoints con requisitos de latencia p99 < 100ms.
- DynamoDB on-demand para cargas impredecibles, provisioned para cargas estables y predecibles.
- Caching con DAX (DynamoDB), CloudFront (APIs públicas) o ElastiCache (datos compartidos).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 173 lines · 36 tokens per session scan A e230a5ec1ec6
aws-architecture is a skill published in the GitHub repository eliecer2000/kiro-bootstrap (9 stars, last pushed 5mo ago), licensed MIT. It adds 36 tokens to every session and 1,895 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
amazon-location-service
Amazon Location Service. Reference skill (loaded via skill:// from the ios agent).
sandy-cli
Run TypeScript scripts in sandboxed microVMs or Docker containers with AWS SDK access via IMDS, through the sandy CLI. Use when investigating AWS resources, running read-only queries, or executing TypeScript automation that needs AWS credentials via shell commands.
amplify-workflow
Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync/DynamoDB including schema modeling, enum types, relationships, authorization rules), storage (S3), functions, APIs, and AI (Amplify AI Kit with Bedrock). Supports React, Next.js, Vue…
aws-lambda-durable-functions
Build resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and orchestration for long-running executions. Covers the critical replay model, step operations, wait/callback patterns, error handling with saga pattern, testing with…
sns
AWS SNS notification service for pub/sub messaging. Use when creating topics, managing subscriptions, configuring message filtering, sending notifications, or setting up mobile push.
aws-lambda
Design, build, deploy, test, and debug serverless applications with AWS Lambda. Triggers on phrases like: Lambda function, event source, serverless application, API Gateway, EventBridge, Step Functions, serverless API, event-driven architecture, Lambda trigger. For deploying non-serverless apps to AWS, use…