aws-lambda-deploy

A deployment guide for AWS Lambda, a service that runs code without managing servers. It requires Lambda projects to use their provided deployment scripts and an AWS single sign-on login.

In plain words
What is it for?
Use it when releasing one Lambda function or all functions in a repository. It helps locate the guaranteed deployment scripts and pass the AWS profile or region when needed.
Why use it?
It prevents deployments through unsupported infrastructure tools or manual commands. It also provides a clear pause point when the project has no approved deployment script.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/j-pster/psters_ai_workflow/deploy-lambda
Any agent
npx skills add J-Pster/Psters_AI_Workflow --skill deploy-lambda
Clone the repo
git clone --depth 1 https://github.com/J-Pster/Psters_AI_Workflow

Made for: Claude Code, Codex.

Per session 41 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 772 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00041 $0.00772
Opus 5 $0.00020 $0.00386
Sonnet 5 $0.00008 $0.00154
Haiku 4.5 $0.00004 $0.00077

Measured 2d ago against content hash 050bf2129ebb, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

aws-lambda-deploy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/psters-ai-workflow/skills/deploy-lambda/SKILL.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AWS Lambda Deploy

Lambdas are deployed only via the project's deploy scripts, using AWS CLI. No CDK deploy, no IAC apply.

Step 1: Detect guaranteed scripts before deploy

From the Lambda repo root, inspect ./scripts/ for guaranteed deploy scripts.

Preferred script names:

  • Single function: deploy-lambda-guaranteed.sh
  • All functions: deploy-all-lambdas-guaranteed.sh

Accept equivalent variants only if they are clearly the same guaranteed flow.

Rule: Use the guaranteed deploy scripts

Each Lambda repo that has deploy scripts must use them:

  • Single function: ./scripts/deploy-lambda-guaranteed.sh <lambda-name> [--profile PROFILE] [--region REGION]
  • All functions in repo: ./scripts/deploy-all-lambdas-guaranteed.sh [--profile PROFILE] [--region REGION]

Script names may vary by repo (e.g. deploy-lambda-guaranteed.sh, deploy-all-lambdas-guaranteed.sh). Look in that repo's scripts/ folder.

Step 2: Mandatory fallback when scripts do not exist

If no guaranteed deploy script exists, do not deploy manually.

Instead, pause and ask the user before creating defaults. Use this message pattern:

No guaranteed deploy script was found in ./scripts. I suggest creating standard deploy scripts now (single Lambda and deploy-all), based on the plugin defaults. Should I create them for this repo?

If the user approves, create these files in the target Lambda repo:

  • ./scripts/deploy-lambda-guaranteed.sh
  • ./scripts/deploy-all-lambdas-guaranteed.sh

Template source (inside plugin):

  • assets/lambda-deploy/deploy-lambda-guaranteed.template.sh
  • assets/lambda-deploy/deploy-all-lambdas-guaranteed.template.sh

After creation:

  1. Make scripts executable (chmod +x).
  2. Review placeholders/TODO values with the user.
  3. Run deploy through the guaranteed script only.

Prerequisite: AWS SSO login

Before any AWS CLI command (including deploy):

aws sso login --profile <aws-profile>

Replace <aws-profile> with the project's AWS profile. If you skip this, deploy will fail with credential/session errors.

Read the full file on GitHub · 83 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 83 lines · 41 tokens per session scan A 050bf2129ebb

Subscribe to this mod's changes

aws-lambda-deploy is a skill published in the GitHub repository J-Pster/Psters_AI_Workflow (290 stars, last pushed 5mo ago), licensed MIT. It adds 41 tokens to every session and 772 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

infrastructure

云原生基础设施。Kubernetes、Helm、Kustomize、Operator、CRD、GitOps、ArgoCD、Flux、IaC、Terraform、Pulumi、CDK。当用户提到 K8s、Helm、GitOps、IaC 时路由到此。.

fengshao1227/ccg-workflow · 65 tokens

remote-compute-modal

Run GPU jobs on the user's own Modal account via host.compute.create('byoc:modal', ...). Covers the create→submit→waitfornotification flow, the computeprovider kernel for env setup, image/volume resolution, and the two approval cards. Load once you've decided to dispatch to Modal.

UnicomAI/wanwu · 65 tokens

compute-env-setup

Set up a compute environment on a remote provider so Claude Science jobs can run there. Covers direct SSH/conda hosts, Slurm clusters, container-via-bridge runners, and managed-API providers (Modal, GCP, RunPod). Use when standing up a new provider, porting an env to a different backend, adding a tool that needs its…

UnicomAI/wanwu · 134 tokens

vs-project

Create Viking web projects, start and verify a local preview, or deploy a generated project to Volcengine IGA Pages when explicitly requested. Includes agent-guided feature, eligible application, dataset, scene, and authentication choices. Use only after confirming the installed CLI exposes vs project; otherwise stop…

volcengine/SearchCLI · 66 tokens

managed-model-endpoints

Register a model service in the managed family — a local model server container the daemon starts/stops on demand, or a remote upstream model API (https). Read the runbook, allocate a port (local only), compose idempotent start/stop scripts (local only), register once. Load when the user wants a model service…

UnicomAI/wanwu · 83 tokens

flow-nexus-swarm

Cloud-based AI swarm deployment and event-driven workflow automation with Flow Nexus platform.

aegntic/cldcde · 20 tokens