Skill collection · aws
agent-toolkit-for-aws agent skills by aws
141 skills from aws/agent-toolkit-for-aws are listed in the directory, across 11 categories.
View aws/agent-toolkit-for-aws on GitHub
At a glance
| Publisher | aws Official |
|---|---|
| Repository | github.com/aws/agent-toolkit-for-aws |
| Listed skills | 141 |
| Security scan | Not scanned |
| Categories | DevOps and Cloud, Data, Analytics and Databases, AI Agents and LLM Engineering, Developer Tools and Frameworks, Security, Testing and QA, Code Review and Code Quality, Frontend and Design, Video, Image, Audio and Creative, Productivity and Knowledge Work, Writing and Editing |
| License | Apache-2.0 |
| Last commit | October 16, 2026 |
| README badge | Get the badge for this listing |
Show the listing in your README
This general badge links to the repository listing. For the two quality badges and feature offer, choose Get badges beside a skill below. Each skill keeps its own score and grade.
Markdown
[](https://skills.suedeai.ai/directory/aws/agent-toolkit-for-aws/)HTML
<a href="https://skills.suedeai.ai/directory/aws/agent-toolkit-for-aws/"><img src="https://skills.suedeai.ai/directory/aws/agent-toolkit-for-aws/badge.svg" alt="Suede Skills Directory: listed" height="20"></a>Limited-time feature offer: display either the numeric or letter badge in your repository or skill README (both also qualify), then request badge verification. Eligible skills scoring 80–99 can receive a featured placement after Suede verifies at least one valid badge linked to the skill’s listing. Suede has not announced an end date.
Skills in aws/agent-toolkit-for-aws
Linked names open the skill's directory page; the rest open the skill folder on GitHub. Descriptions on rows without a page are quoted from each SKILL.md.
No matching skills. Try fewer words or clear your search.
| Skill | Category | What it does |
|---|---|---|
| agent-advisor 82/100 · B | AI agents | Entry point for AI-agent work on AWS: pick a runtime, plan a migration for existing workloads, and build an executable POC — one phased flow…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| agents-build 83/100 · B | AI agents | Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments, or…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| agents-connect 74/100 · C | AI agents | Use when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies. Handles gateway… |
| agents-debug 76/100 · C | AI agents | Use when your agent or environment is broken — wrong answers, errors, timeouts, tool failures, or CLI issues. Reads traces and logs to diagnose root… |
| agents-deploy 89/100 · B | DevOps | Use when deploying your agent to AWS, or when a deploy has failed. Handles pre-flight validation, CDK/IAM/quota error diagnosis, version management…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| agents-get-started 87/100 · B | AI agents | Use when a developer wants to create a new agent project or get started with AgentCore. Handles framework selection, project scaffolding, first…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| agents-harden 74/100 · C | AI agents | Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session… |
| agents-optimize 84/100 · B | AI agents | Use when measuring or improving agent quality and performance — set up evaluators, online monitoring, CI/CD quality gates, observability, or cost…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| agents-pay 78/100 · C | AI agents | Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments, and applying… |
| amazon-aurora-mysql 78/100 · C | Data | Amazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel… |
| amazon-aurora-postgresql 78/100 · C | Data | Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora… |
| amazon-bedrock 71/100 · C | AI agents | Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents… |
| amazon-braket 72/100 · C | DevOps | Runs quantum computing workflows on AWS through Amazon Braket — discovering devices (QPUs and simulators) and their availability, building… |
| amazon-documentdb 80/100 · B | Data | Manages Amazon DocumentDB end-to-end — serverless-on-8.0 cluster setup, TLS/VPC/driver config, flexible-schema and vector-search data modeling…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| amazon-dynamodb 67/100 · D | Design | Designs, reviews, and debugs DynamoDB data layers from design axioms — enumerates access patterns, chooses partition/sort keys and GSIs, decides… |
| amazon-ec2-image-builder 82/100 · B | Media | Creates and automates custom image builds with EC2 Image Builder - Linux, Windows, and macOS AMIs, and container images to ECR. Covers the build IAM…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| amazon-elasticache 78/100 · C | AI agents | Activate when developers have latent caching needs: slow API responses, database read bottlenecks, DynamoDB throttling or cost, RDS/Aurora scaling… |
| amazon-keyspaces 71/100 · C | DevOps | Provides authoritative compatibility checks, pricing estimates, connection troubleshooting, pre-warming guidance, and infrastructure mutations for… |
| amazon-neptune 72/100 · C | Data | Provides authoritative guidance on Amazon Neptune Database and Neptune Analytics for graph, knowledge-graph, and relationship-heavy workloads —… |
| amazon-opensearch-service 78/100 · C | Data | Guides migration, provisioning, search, log-analytics, trace-analytics, and Agentic AI Assistant workflows for Amazon OpenSearch Service and… |
| amazon-ses 80/100 · B | Productivity | Guides Amazon SES onboarding for domain-based email sending. Covers identity configuration, production access, an optional first test send, and…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| amazon-workspaces-agent-access 83/100 · B | AI agents | Connects AI agents to remote Windows desktop applications on Amazon WorkSpaces Applications (AppStream 2.0) through the managed Agent Access MCP…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| analyzing-release-readiness 77/100 · C | Dev tools | Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk… |
| arc-region-switch 80/100 · B | Design | Answers questions about Amazon Application Recovery Controller (ARC) Region switch including architecture, plans, execution blocks, workflows…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| architect-for-startups 80/100 · B | DevOps | Startup-tailored AWS architecture advice for non-agent workloads, adjusted to the company's stage (pre-revenue through Series B+), team size…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| authoring-mwaa-workflow 76/100 · C | DevOps | Authors and deploys MWAA workflow artifacts: Python Airflow DAGs for provisioned environments or YAML workflow files for Serverless. Covers operator… |
| aws-ai-ml 80/100 · B | DevOps | Selects, deploys, and customizes AI models on Amazon SageMaker. Training or Processing jobs, fine-tuning (SFT/DPO/RLVR/RLAIF), model selection…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-amplify 78/100 · C | DevOps | Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync/DynamoDB)… |
| aws-auth 68/100 · D | DevOps | Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries… |
| aws-billing-and-cost-management 80/100 · B | DevOps | Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-blocks 77/100 · C | DevOps | Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building… |
| aws-cdk 80/100 · B | DevOps | Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-cleanrooms 74/100 · C | DevOps | Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and… |
| aws-cloudformation 72/100 · C | DevOps | Authors, validates, and troubleshoots AWS CloudFormation templates. Covers template authoring with secure defaults, local validation with either… |
| aws-compute 68/100 · D | Media | Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance… |
| aws-containers 70/100 · C | DevOps | Builds and deploys containerized workloads on Elastic Kubernetes Service (EKS), Elastic Container Service (ECS), Fargate, and ECR (Elastic Container… |
| aws-database 81/100 · B | Data | Routes any task involving AWS databases — choosing, comparing, recommending, getting started with, or operating a database — to the correct…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-deployment 70/100 · C | DevOps | Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers… |
| aws-iam 76/100 · C | DevOps | Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS… |
| aws-lambda-durable-functions 78/100 · C | DevOps | Builds resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and… |
| aws-lambda-managed-instances 76/100 · C | DevOps | Evaluates, configures, and migrates workloads to AWS Lambda Managed Instances (LMI). Runs Lambda Event Functions (standard Lambda) on EC2 instances… |
| aws-lambda-microvms 68/100 · D | DevOps | Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments… |
| aws-lambda-web-functions 75/100 · C | DevOps | Creates and deploys Node.js HTTP web applications on AWS Lambda Web Functions. Guides users through building web apps and APIs with Express… |
| aws-marketplace-metering 75/100 · C | DevOps | Deploys, queries, and debugs AWS Marketplace usage-based (PAYG) metering — the pipeline (ResolveCustomer, BatchMeterUsage, EventBridge via SAM) and… |
| aws-messaging-and-streaming 77/100 · C | DevOps | Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data… |
| aws-network-monitoring 69/100 · D | AI agents | Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health. Covers agent installation, IAM… |
| aws-networking 79/100 · C | DevOps | Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS… |
| aws-observability 71/100 · C | DevOps | Builds, configures, debugs, and optimizes AWS observability - operator-symptom questions and detecting Omni vs classic CloudWatch. CloudWatch on an… |
| aws-resilience-lifecycle 81/100 · B | DevOps | Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller. Covers…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-sdk-js-v3-usage 80/100 · B | DevOps | AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-sdk-python-usage 80/100 · B | Dev tools | AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-sdk-swift-usage 75/100 · C | Dev tools | AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package. |
| aws-secrets-manager 72/100 · C | DevOps | Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords. Prevents AI agents from directly fetching… |
| aws-security 68/100 · D | Security | AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review… |
| aws-serverless 66/100 · D | Dev tools | Routes serverless requests to a compute form factor and the skill that owns it. Applies first to Lambda, API Gateway, EventBridge, Step Functions… |
| aws-sms-voice 68/100 · D | DevOps | Onboards RCS Business Messaging and Notify OTP via the pinpoint-sms-voice-v2 AWS CLI. Covers creating a branded RCS test agent (logo, banner, rich… |
| aws-step-functions 83/100 · B | Testing | Authors and edits AWS Step Functions state machines: writes Amazon States Language (ASL) in JSONata, and chooses and structures state types (Task…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| aws-storage 73/100 · C | DevOps | Selects, investigates, and compares AWS object, file, and block storage services, and answers cost, performance, configuration, security, and… |
| aws-transform 66/100 · D | DevOps | Performs code upgrades, migrations, and transformations using the AWS Transform (ATX) CLI. Use when upgrading language versions, migrating AWS SDKs… |
| aws-well-architected-review 76/100 · C | DevOps | Performs a full AWS Well-Architected Framework review evaluating every framework question across all pillars discovered from the live AWS… |
| azure-to-aws 80/100 · B | DevOps | Migrate workloads from Microsoft Azure to AWS. Triggers on: migrate from Azure, Azure to AWS, move off Azure, migrate AKS to EKS, migrate App…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| chatting-with-aws-devops-agent 77/100 · C | DevOps | Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge /… |
| cloudfront 68/100 · D | DevOps | Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront… |
| configuring-vpc-endpoints-for-private-aws-service-access 74/100 · C | DevOps | Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private… |
| connecting-lambda-to-api-gateway 74/100 · C | Dev tools | Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration… |
| connecting-lambda-to-dynamodb 74/100 · C | DevOps | Connects an AWS Lambda function to DynamoDB with IAM roles, stream event source mapping, and read/write permissions. Use when setting up… |
| connecting-to-data-source 82/100 · B | Data | Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| connecting-vpcs-with-peering 74/100 · C | Security | Establishes VPC peering connections between two VPCs for direct private network connectivity. Always use this skill when creating or managing VPC… |
| contextual-offers-for-startups 77/100 · C | DevOps | Surfaces a single, genuinely relevant AWS Activate partner offer as optional context AFTER another AWS Startup Advisor skill has finalized its… |
| creating-amazon-aurora-db-cluster-with-instances 74/100 · C | Data | Creates a complete Amazon Aurora database cluster with instances, handling cluster creation, instance provisioning, and Secrets Manager password… |
| creating-api-gateway-stage 74/100 · C | Dev tools | Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use… |
| creating-data-lake-table 82/100 · B | Data | Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management. Sets up table…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| creating-production-vpc-multi-az 74/100 · C | DevOps | Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route… |
| creating-secrets-using-best-practices 74/100 · C | Code quality | Creates and manages secrets in AWS Secrets Manager following security best practices. Always use this skill when creating secrets — it sets up… |
| debugging-lambda-timeouts 74/100 · C | Testing | Debugs AWS Lambda function timeout failures by systematically analyzing function configuration, CloudWatch logs and metrics, VPC/networking, cold… |
| debugging-mwaa-workflow 78/100 · C | Testing | Diagnoses and root-causes Amazon MWAA workflow failures across Provisioned (Python DAG) and Serverless (YAML workflow) environments. Provisioned… |
| deploying-custom-domain-rest-api 71/100 · C | Dev tools | Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI. Covers ACM… |
| developing-applications-on-managed-service-for-apache-flink 68/100 · D | Data | MANDATORY for Flink or Amazon Managed Service for Apache Flink (MSF) questions. You MUST activate this skill BEFORE answering — do not answer from… |
| diff-scanning-with-aws-security-agent 74/100 · C | Security | Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check… |
| directconnect 80/100 · B | DevOps | Configures AWS Direct Connect: choosing a connection model (dedicated, hosted, or a link aggregation group) and completing the cross connect…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| dms-schema-conversion 69/100 · D | Data | Handles the full DMS Schema Conversion lifecycle including creating migration projects, converting database schemas to a target engine, running… |
| enabling-lambda-vpc-internet-access 74/100 · C | DevOps | Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet… |
| exploring-data-catalog 84/100 · B | DevOps | Full inventory and audit of AWS Glue Data Catalog assets across S3 Tables, Redshift-federated, and remote Iceberg catalogs. Triggers on: inventory…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| exporting-rds-to-s3 74/100 · C | Data | Exports Amazon RDS or Aurora database snapshots to Amazon S3 in Apache Parquet format for analytics, backup, or data migration. Handles snapshot… |
| finding-data-lake-assets 84/100 · B | Data | Resolve data lake and lakehouse asset references across Glue Data Catalog, S3, S3 Tables, and Redshift. Triggers on: find the table, where is our…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| gcp-to-aws 74/100 · C | DevOps | Migrate workloads from Google Cloud Platform to AWS — plus AI and agentic workloads from any provider. Triggers on: migrate from GCP, GCP to AWS… |
| heroku-to-aws 79/100 · C | DevOps | Migrate workloads from Heroku to AWS. Triggers on: migrate from Heroku, Heroku to AWS, move off Heroku, migrate Heroku Postgres to RDS, migrate… |
| ingesting-into-data-lake 80/100 · B | Data | Import data into the AWS data lake from S3 files, local uploads, JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS, Aurora), Amazon…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| investigating-incidents-with-aws-devops-agent 80/100 · B | DevOps | Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior —…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| knowledge-base-for-startups 82/100 · B | DevOps | AWS Startups reference content — Activate FAQ, credits guide, programs, partner offers, sample architectures, and hundreds of learn articles…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| launch-with-aws 83/100 · B | DevOps | Migrates vibe-coded web applications to AWS. Handles the full workflow from analysis through migration to deployment, producing deployable AWS…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| launching-ec2-instance-with-best-practices 74/100 · C | Code quality | Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles… |
| llm-to-bedrock 73/100 · C | DevOps | Use when the user wants to migrate code that calls OpenAI, Gemini/Google AI, or the Anthropic API to Amazon Bedrock — a pure model/SDK rewrite… |
| managing-amazon-kinesis-data-streams 79/100 · C | DevOps | Operates Amazon Kinesis Data Streams (KDS). Covers streaming tables and Amazon S3 delivery - serverless, fully managed delivery from a KDS stream to… |
| managing-amazon-msk 82/100 · B | DevOps | Operates Amazon MSK Provisioned clusters (Standard and Express brokers). Required for ANY MSK Provisioned task — training data conflates Standard…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| migrate-to-msk 78/100 · C | Testing | Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual… |
| migrating-to-amazon-redshift 76/100 · C | Data | Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration… |
| operate-on-aws 74/100 · C | DevOps | Operate a live AWS workload with AWS DevOps Agent — incident investigation, root-cause analysis, and release-readiness review — for startups with no… |
| pentesting-with-aws-security-agent 77/100 · C | Security | Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied… |
| processing-s3-uploads-with-step-functions 74/100 · C | DevOps | Deploy an event-driven workflow that routes S3 uploads to either Lambda or Fargate via Step Functions based on file size. Uses EventBridge to… |
Show the other 41 skills
| Skill | Category | What it does |
|---|---|---|
| querying-aws-cloudwatch 67/100 · D | Data | Runs SQL queries on CloudWatch Logs data exported as Apache Iceberg tables in S3 Tables. Covers VPC Flow Logs, WAF logs, CloudFront access logs… |
| querying-aws-redshift 68/100 · D | Writing | Enables Redshift system-table (SYS_*) log publishing to S3 Tables in Apache Iceberg format for both Provisioned clusters and Serverless namespaces… |
| querying-aws-s3 67/100 · D | DevOps | Queries S3 object metadata, tracks bucket activity, audits object changes, searches annotations, and analyzes storage metrics using S3 Metadata… |
| querying-aws-sagemaker-catalog 69/100 · D | Data | Runs SQL analytics on SageMaker Catalog asset metadata tables exported as Apache Iceberg in S3 Tables. Covers governance queries, asset growth… |
| querying-data-lake 84/100 · B | Data | Execute and manage Athena SQL queries across default and federated catalogs (Glue, S3 Tables, Redshift). Triggers on phrases like: query data, run…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| rds-db2 71/100 · C | Dev tools | Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL… |
| rds-oracle 69/100 · D | Dev tools | Diagnoses and resolves Amazon RDS for Oracle connectivity, authentication, networking, and driver troubleshooting. Applicable to any RDS-for-Oracle… |
| rds-oss 67/100 · D | Data | Advises on Amazon RDS open-source engines (MySQL, MariaDB, PostgreSQL) for instance creation, upgrade planning, commitment pricing, proxy… |
| rds-sqlserver 78/100 · C | Data | Provides connectivity, authentication, and troubleshooting guidance for Amazon RDS for SQL Server. Applicable when users ask about SSMS times out… |
| recovery-controller-setup 70/100 · C | DevOps | Configures AWS Application Recovery Controller (ARC) for operational resilience: routing controls with safety rules for cross-Region failover, and… |
| redshift-guide 76/100 · C | Data | Amazon Redshift is NOT PostgreSQL; corrects LLM mistakes; covers SQL, metadata, connectivity/auth, storage, query performance, and operations… |
| remediating-with-aws-security-agent 78/100 · C | Security | Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent… |
| resilience-hub-failure-mode-assessment 77/100 · C | DevOps | Runs and interprets AWS Resilience Hub v2 failure mode assessments. Covers starting assessments, understanding findings (severity, categories… |
| resilience-hub-getting-started 77/100 · C | DevOps | Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys, onboards services… |
| resilience-program-design 72/100 · C | Design | Designs a resilience program: how to structure and standardize resilience policies across an organization, team, or portfolio (tiered policy model… |
| route53 70/100 · C | Dev tools | Configures Amazon Route 53 DNS: public and private records, traffic-steering routing policies, health checks, DNS Firewall, Route 53 Profiles, VPC… |
| routing-traffic-with-route53-and-cloudfront 74/100 · C | Dev tools | Configures Amazon Route 53 to route traffic to a CloudFront distribution using a custom domain. Use when setting up DNS alias records, alternate… |
| running-release-tests 77/100 · C | Testing | Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate… |
| scanning-with-aws-security-agent 77/100 · C | Security | Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked… |
| securing-s3-buckets 84/100 · B | Code quality | Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| setting-up-cloudtrail-multi-region 74/100 · C | DevOps | Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security… |
| setting-up-cloudwatch-alarm-notifications 74/100 · C | Security | Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications —… |
| setting-up-cloudwatch-observability 68/100 · D | DevOps | Sets up CloudWatch observability for the first time - Omni (CloudWatch Application Observability) and classic CloudWatch. Omni: creating a Space or… |
| setting-up-ec2-instance-profiles 74/100 · C | DevOps | Configures EC2 instances to securely call AWS services by creating and attaching IAM roles via instance profiles, eliminating hardcoded credentials… |
| setup 73/100 · C | AI agents | Set up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are… |
| setup-devops-agent 80/100 · B | AI agents | Setup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| setup-security-agent 80/100 · B | Security | Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| shieldadvanced 76/100 · C | DevOps | Configures AWS Shield Advanced for enhanced Distributed Denial of Service (DDoS) protection: subscribing accounts and adding resource protections… |
| signing-in-to-aws 72/100 · C | DevOps | Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS… |
| sitetositevpn 80/100 · B | DevOps | Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| start-building-for-startups 74/100 · C | DevOps | Interactive discovery + implementation workflow that gathers requirements through picker-based questions (intent, scope, constraints, preferences)… |
| storing-and-querying-vectors 84/100 · B | AI agents | Store and query vector embeddings using Amazon S3 Vectors, a cost-effective long-term vector storage service with its own API namespace (s3vectors)…Get badges  Choose the numeric badge, the letter badge, or both. Each links to this skill’s Suede listing; either valid linked badge can qualify for the feature offer. Markdown HTML |
| testing-mwaa-workflow 78/100 · C | Testing | Tests Amazon MWAA workflow execution end-to-end: trigger a run and monitor it to completion for Provisioned (Python DAG, via Airflow REST API) and… |
| tf-best-practices 77/100 · C | DevOps | Best-practice authoring guidance AND a read-only policy gate for AWS Terraform generated by a migration skill. Load during any phase that writes a… |
| threat-modeling-with-aws-security-agent 74/100 · C | Security | Run an AWS Security Agent threat model review on spec/design documents. Use when the user asks to review a spec for security, run a threat model… |
| timestream-influxdb 74/100 · C | DevOps | Retrieves authoritative guidance on Amazon Timestream for InfluxDB across its supported engine variants. Applicable to any InfluxDB-on-AWS request… |
| transitgateway 68/100 · D | DevOps | Configures AWS Transit Gateway: creating a hub and attaching VPCs, segmenting traffic with route tables, centralizing egress and inspection through… |
| troubleshooting-application-failures 74/100 · C | Dev tools | Troubleshoots failing applications by discovering and analyzing CloudWatch log groups to identify error patterns, root causes, and actionable… |
| troubleshooting-efs 77/100 · C | Dev tools | Diagnoses and resolves Amazon EFS issues including mount failures, NFS timeouts, permission errors, throughput problems, and burst credit… |
| troubleshooting-s3-files 77/100 · C | Dev tools | Diagnoses and resolves Amazon S3 Files issues including mount failures, permission errors, synchronization problems, and performance issues. Use… |
| upgrading-mwaa-environments 77/100 · C | Testing | Upgrades an MWAA environment to a newer Airflow version — within 2.x, within 3.x, or across the 2.x-to-3.x boundary. Computes the version-jump path… |
Where this repository is cited
aws/agent-toolkit-for-aws is listed as its publisher's official collection or from a listing request.