aws-skills

name	aws-skills
description	Guides AWS development with infrastructure automation and cloud architecture patterns. Use when designing or refactoring cloud-native applications on AWS, automating environment provisioning with Terraform/CDK/CloudFormation, setting up secure CI/CD pipelines, evaluating service choices for cost/scalability/fault tolerance, or preparing production runbooks and observability.
metadata	{"author":"sickn33","source":"https://playbooks.com/skills/sickn33/antigravity-awesome-skills/aws-skills"}

AWS Cloud Architecture & Infrastructure Skills

Overview

Practical patterns and tooling for AWS development focused on infrastructure automation and cloud architecture. Covers provisioning, CI/CD, security, and cost-aware design using common IaC and AWS services. Aimed at developers and architects who need repeatable, production-ready approaches for AWS workloads.

How This Skill Works

Inspects your architecture goals and recommends infrastructure-as-code patterns, service choices, and deployment workflows. Suggests templates, module boundaries, and automation steps for Terraform, CloudFormation, CDK, and CI pipelines. Highlights security controls, networking topologies, and cost optimization measures tailored to the chosen services.

When to Use

• Designing or refactoring cloud-native applications on AWS
• Automating environment provisioning with Terraform, CDK, or CloudFormation
• Setting up secure CI/CD pipelines for infrastructure and application code
• Evaluating service choices for cost, scalability, and fault tolerance
• Preparing production runbooks, observability, and incident response

Best Practices

• Model infrastructure as modular IaC components with clear ownership
• Enforce least-privilege IAM policies and use short-lived credentials
• Automate tests and policy checks in CI for IaC changes
• Design multi-AZ and graceful-failover patterns for critical workloads
• Monitor cost and performance with tagging, budgets, and observability

Example Use Cases

1. VPC with Transit Gateway - Create segmented subnets for multi-tier apps
2. Blue/Green Deployments - Implement canary deployments for ECS, EKS, or Lambda workloads
3. Infrastructure Pipelines - Build automated pipelines that run plan/apply with approvals
4. Account Hardening - Harden with SCPs, IAM roles, and centralized logging/monitoring
5. Migration - Migrate monolithic services to serverless or container platforms with staged rollout

IaC Tool Selection Guide

Tool	Best For	Strengths
Terraform	Cross-cloud consistency	Large module ecosystem, HCL declarative syntax
CDK	Complex logic, familiar languages	TypeScript/Python/Java constructs, L2/L3 abstractions
CloudFormation	Native AWS support	No external tooling, deep AWS integration

Environment Consistency

To keep environments consistent across dev, staging, and prod:

• Use the same IaC modules with parameterized inputs
• Enforce policy-as-code checks in CI
• Apply automated promotion gates so the same templates and tests run across environments

Architecture Patterns

Multi-AZ High Availability

• Deploy across at least 2 AZs
• Use ALB/NLB for traffic distribution
• Configure auto-scaling groups with health checks
• Implement database read replicas across AZs

Cost Optimization

• Right-size instances using AWS Compute Optimizer
• Use Savings Plans or Reserved Instances for steady-state workloads
• Implement auto-scaling for variable workloads
• Tag all resources for cost allocation and tracking
• Set up AWS Budgets with alerts

Security Baseline

• Enable AWS CloudTrail in all regions
• Configure AWS Config rules for compliance
• Use AWS GuardDuty for threat detection
• Implement VPC Flow Logs
• Enable AWS Security Hub for centralized findings