Menu
AWS cloud operations for CloudWatch, S3, Lambda, EC2, and IAM
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/oimiragieo/agent-studio --skill aws-cloud-opsThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Agent frontmatter enhancements — disallowedTools, mcpServers scoping, fork_eligible field
Context management — pre-compact persistence, threshold alignment, microcompact/circuit breaker detection
Hook enhancements — updatedInput for bash safety prefixes, suppressOutput for verbose blocks, denial-based routing feedback
Showing SKILL.md
Based on SOC occupation classification
| name | aws-cloud-ops |
| description | AWS cloud operations for CloudWatch, S3, Lambda, EC2, and IAM |
| version | 1.0.0 |
| model | sonnet |
| invoked_by | both |
| user_invocable | true |
| tools | ["Bash","Read"] |
| best_practices | ["Never hardcode credentials","Use IAM roles when possible","Verify region before operations"] |
| error_handling |
| graceful |
| streaming | supported |
| verified | false |
| lastVerifiedAt | "2026-02-19T05:29:09.098Z" |
| source | builtin |
| trust_score | 100 |
| provenance_sha | 9bd27ce79d2d643f |
The skill invokes the AWS CLI v2. Install and configure:
sudo ./aws/installcurl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "AWSCLIV2.pkg" then run the installermsiexec; or install via package managersConfigure: aws configure (access key, secret, region). Verify: aws --version
Identity & config: aws sts get-caller-identity — who am I; aws configure list-profiles — list profiles.
S3: aws s3 ls; aws s3 cp <local> s3://bucket/; aws s3 sync ./dir s3://bucket/; aws s3 rm s3://bucket/key.
Lambda: aws lambda list-functions; aws lambda invoke --function-name X output.json; aws lambda get-function --function-name X.
CloudWatch: aws cloudwatch list-metrics; aws cloudwatch get-metric-statistics; aws cloudwatch describe-alarms; put-metric-alarm for alerts.
EC2: aws ec2 describe-instances; start-instances/stop-instances/terminate-instances with --instance-ids.
Best practices: Use IAM roles over long-lived keys; set AWS_REGION/AWS_PROFILE; use --output json and --query to limit response size; run destructive ops only after describe to confirm resources.
Free: AWS Skill Builder — exam prep, Cloud Quest, Cloud Essentials. Cloud Practitioner (CLF-C02): Cloud concepts, security/compliance, technology/services, billing (~6 months exposure). Solutions Architect Associate: Next step; prep on Skill Builder.
Skill data: Map to S3, Lambda, CloudWatch, EC2, IAM; security best practices; no hardcoded credentials.
Suggested hooks: Pre-deploy: validate credentials (aws sts get-caller-identity). Cost-tracking hook: optional CloudWatch/billing checks. No mandatory hook; use when devops is routed for AWS tasks.
Workflows: Use with devops (contextual: aws_project). Flow: detect AWS project → load aws-cloud-ops → run CLI via skill script. See operations/incident-response if debugging AWS resources.
Provides 90%+ context savings vs raw AWS MCP server. Multi-service support with progressive disclosure by service category.
| Tool | Description | Confirmation |
|---|---|---|
| logs-groups | List log groups | No |
| logs-tail | Tail log stream | No |
| logs-filter | Filter log events | No |
| metrics-list | List metrics | No |
| metrics-get | Get metric data | No |
| alarm-list | List alarms | No |
| alarm-create | Create alarm | Yes |
| Tool | Description | Confirmation |
|---|---|---|
| s3-ls | List buckets/objects | No |
| s3-cp | Copy objects | Yes |
| s3-sync | Sync directories | Yes |
| s3-rm | Delete objects | Yes |
| Tool | Description | Confirmation |
|---|---|---|
| lambda-list | List functions | No |
| lambda-get | Get function details | No |
| lambda-invoke | Invoke function | Yes |
| lambda-logs | Get function logs | No |
| Tool | Description | Confirmation |
|---|---|---|
| ec2-list | List instances | No |
| ec2-describe | Describe instance | No |
| ec2-start | Start instance | Yes |
| ec2-stop | Stop instance | Yes |
| sg-list | List security groups | No |
| Tool | Description | Confirmation |
|---|---|---|
| iam-users | List users | No |
| iam-roles | List roles | No |
| iam-policies | List policies | No |
# List EC2 instances
aws ec2 describe-instances --output table
# Tail CloudWatch logs
aws logs tail /aws/lambda/my-function --follow
# List S3 buckets
aws s3 ls
# Invoke Lambda
aws lambda invoke --function-name my-func output.json
⚠️ Never hardcode credentials ⚠️ Use IAM roles when possible ⚠️ IAM write operations are blocked
| Issue | Solution |
|---|---|
| Access denied | Check IAM permissions |
| Region error | Set AWS_REGION |
| Credentials | Run aws configure |
Before starting:
Read .claude/context/memory/learnings.md
After completing:
.claude/context/memory/learnings.md.claude/context/memory/issues.md.claude/context/memory/decisions.mdASSUME INTERRUPTION: If it's not in memory, it didn't happen.