Skip to main content Home Creators chonsong skill-retriever aws-cost-operations
aws-cost-operations AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when user mentions AWS costs, spending, billing,...
Jump to install Skills Marketplace Discover and explore AI skills built by the community.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Show prompt details A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/ChonSong/skill-retriever --skill aws-cost-operationsThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Download Zip Downloading... name aws-cost-operations description AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when user mentions AWS costs, spending, billing,... risk unknown source https://github.com/zxkane/aws-skills/tree/main/plugins/aws-cost-ops/skills/aws-cost-operations source_repo zxkane/aws-skills source_type community date_added 2026-07-01T00:00:00.000Z license MIT license_source https://github.com/zxkane/aws-skills/blob/main/LICENSE
AWS Cost & Operations
This skill provides comprehensive guidance for AWS cost optimization, monitoring, observability, and operational excellence with integrated MCP servers.
AWS Documentation Requirement
Always verify AWS facts using MCP tools (mcp__aws-mcp__* or mcp__*awsdocs*__*) before answering. The aws-mcp-setup dependency is auto-loaded — if MCP tools are unavailable, guide the user through that skill's setup flow.
Integrated MCP Servers
This plugin provides 3 MCP servers:
Bundled Servers
1. AWS Pricing MCP Server (pricing)
Purpose : Pre-deployment cost estimation and optimization
Estimate costs before deploying resources
Compare pricing across regions
Calculate Total Cost of Ownership (TCO)
Evaluate different service options for cost efficiency
2. AWS Cost Explorer MCP Server (costexp)
Purpose : Detailed cost analysis and reporting
Analyze historical spending patterns
Identify cost anomalies and trends
Forecast future costs
Analyze cost by service, region, or tag
3. Amazon CloudWatch MCP Server (cw)
Purpose : Metrics, alarms, and logs analysis
Query CloudWatch metrics and logs
Create and manage CloudWatch alarms
Troubleshoot operational issues
Monitor resource utilization
Note : The following servers are available separately via the Full AWS MCP Server (see aws-mcp-setup skill) and are not bundled with this plugin:
AWS Billing and Cost Management MCP — Real-time billing details
CloudWatch Application Signals MCP — APM and SLOs
AWS Managed Prometheus MCP — PromQL queries for containers
AWS CloudTrail MCP — API activity audit
AWS Well-Architected Security Assessment MCP — Security posture assessment
When to Use This Skill
Use this skill when:
Optimizing AWS costs and reducing spending
Estimating costs before deployment
Monitoring application and infrastructure performance
Setting up observability and alerting
Analyzing spending patterns and trends
Investigating operational issues
Auditing AWS activity and changes
Assessing security posture
Implementing operational excellence
Cost Optimization Best Practices
Pre-Deployment Cost Estimation Always estimate costs before deploying :
Use AWS Pricing MCP to estimate resource costs
Compare pricing across different regions
Evaluate alternative service options
Calculate expected monthly costs
Plan for scaling and growth
"Estimate the monthly cost of running a Lambda function with
1 million invocations, 512MB memory, 3-second duration in us-east-1"
Cost Analysis and Optimization
Use Cost Explorer MCP to analyze spending trends
Identify cost anomalies and unexpected charges
Review costs by service, region, and environment
Compare actual vs. budgeted costs
Generate cost optimization recommendations
Cost optimization strategies :
Right-size over-provisioned resources
Use appropriate storage classes (S3, EBS)
Implement auto-scaling for dynamic workloads
Leverage Savings Plans and Reserved Instances
Delete unused resources and snapshots
Use cost allocation tags effectively
Budget Monitoring Track spending against budgets :
Use Billing and Cost Management MCP to monitor budgets
Set up budget alerts for threshold breaches
Review budget utilization regularly
Adjust budgets based on trends
Implement cost controls and governance
Monitoring and Observability Best Practices
CloudWatch Metrics and Alarms Implement comprehensive monitoring :
Use CloudWatch MCP to query metrics and logs
Set up alarms for critical metrics:
CPU and memory utilization
Error rates and latency
Queue depths and processing times
API gateway throttling
Lambda errors and timeouts
Create CloudWatch dashboards for visualization
Use log insights for troubleshooting
Lambda error rate > 1%
EC2 CPU utilization > 80%
API Gateway 4xx/5xx error spike
DynamoDB throttled requests
ECS task failures
Application Performance Monitoring Monitor application health :
Use CloudWatch Application Signals MCP for APM
Track service-level objectives (SLOs)
Monitor application dependencies
Identify performance bottlenecks
Set up distributed tracing
Container and Kubernetes Monitoring For containerized workloads :
Use AWS Managed Prometheus MCP for metrics
Monitor container resource utilization
Track pod and node health
Create PromQL queries for custom metrics
Set up alerts for container anomalies
Audit and Security Best Practices
CloudTrail Activity Analysis
Use CloudTrail MCP to analyze API activity
Track who made changes to resources
Investigate security incidents
Monitor for suspicious activity patterns
Audit compliance with policies
"Who deleted this S3 bucket?"
"Show all IAM role changes in the last 24 hours"
"List failed login attempts"
"Find all actions by a specific user"
"Track modifications to security groups"
Security Assessment Regular security reviews :
Use Well-Architected Security Assessment MCP
Assess security posture against best practices
Identify security gaps and vulnerabilities
Implement recommended security improvements
Document security compliance
Security assessment areas :
Identity and Access Management (IAM)
Detective controls and monitoring
Infrastructure protection
Data protection and encryption
Incident response preparedness
Using MCP Servers Effectively
Cost Analysis Workflow
Pre-deployment : Use Pricing MCP to estimate costsPost-deployment : Use Billing MCP to track actual spendingAnalysis : Use Cost Explorer MCP for detailed cost analysisOptimization : Implement recommendations from Cost Explorer
Monitoring Workflow
Setup : Configure CloudWatch metrics and alarmsMonitor : Use CloudWatch MCP to track key metricsAnalyze : Use Application Signals for APM insightsTroubleshoot : Query CloudWatch Logs for issue resolution
Security Workflow
Audit : Use CloudTrail MCP to review activityAssess : Use Well-Architected Security AssessmentRemediate : Implement security recommendationsMonitor : Track security events via CloudWatch
MCP Usage Best Practices
Cost Awareness : Check pricing before deploying resourcesProactive Monitoring : Set up alarms for critical metricsRegular Reviews : Analyze costs and performance weeklyAudit Trails : Review CloudTrail logs for complianceSecurity First : Run security assessments regularlyOptimize Continuously : Act on cost and performance recommendations
Operational Excellence Guidelines
Cost Optimization
Tag Everything : Use consistent cost allocation tagsReview Monthly : Analyze spending trends and anomaliesRight-size : Match resources to actual usageAutomate : Use auto-scaling and schedulingMonitor Budgets : Set alerts for cost overruns
Monitoring and Alerting
Critical Metrics : Alert on business-critical metricsNoise Reduction : Fine-tune thresholds to reduce false positivesActionable Alerts : Ensure alerts have clear remediation stepsDashboard Visibility : Create dashboards for key stakeholdersLog Retention : Balance cost and compliance needs
Security and Compliance
Least Privilege : Grant minimum required permissionsAudit Regularly : Review CloudTrail logs for anomaliesEncrypt Data : Use encryption at rest and in transitAssess Continuously : Run security assessments frequentlyIncident Response : Have procedures for security events
Additional Resources For detailed operational patterns and best practices, refer to the comprehensive reference:
File : references/operations-patterns.md
Cost optimization strategies
Monitoring and alerting patterns
Observability best practices
Security and compliance guidelines
Troubleshooting workflows
CloudWatch Alarms Reference File : references/cloudwatch-alarms.md
Common alarm configurations for:
Lambda functions
EC2 instances
RDS databases
DynamoDB tables
API Gateway
ECS services
Application Load Balancers
Limitations
Use this skill only when the task clearly matches its upstream source and local project context.
Verify commands, generated code, dependencies, credentials, and external service behavior before applying changes.
Do not treat examples as a substitute for environment-specific tests, security review, or user approval for destructive or costly actions.
More from this repository
Multi-agent autonomous startup system for Claude Code. Triggers on "Loki Mode". Orchestrates 100+ specialized agents across engineering, QA, DevOps, security, data/ML, business operations, marketing, HR, and customer success. Takes PRD to fully deployed, revenue-generating product with zero human intervention. Features Task tool for subagent dispatch, parallel code review with 3 specialized reviewers, severity-based issue triage, distributed task queue with dead letter handling, automatic deployment to cloud providers, A/B testing, customer feedback loops, incident response, circuit breakers, and self-healing. Handles rate limits via distributed state checkpoints and auto-resume with exponential backoff. Requires --dangerously-skip-permissions flag.
When the user wants to plan, design, or implement an A/B test or experiment, or build a growth experimentation program. Also use when the user mentions "A/B test," "split test," "experiment," "test this change," "variant copy," "multivariate test," "hypothesis," "should I test this,"...
Related occupations SOC
Based on SOC occupation classification
