aws-vpc-dns-investigation Use this skill when a name is not resolving as expected inside a VPC, or before applying a DNS control-plane change. Activate on symptoms such as NXDOMAIN or SERVFAIL from an EC2 instance, a hostname resolving to a public address when a private endpoint was expected, an AWS service endpoint that stopped resolving after a VPC endpoint or Route 53 change, an application reaching the wrong IP, resolution that works from one instance but not another, IPv6 or dualstack resolution differences, a suspected on-premises forwarding or hybrid DNS problem, or a request to check whether enabling private DNS, adding a Resolver rule, associating a private hosted zone, attaching DNS Firewall, or associating a Route 53 Profile would break anything. It drives the aws-vpc-dns-diagnostics MCP server to observe live resolution from inside the subnet and to simulate a proposed change before it is applied.
storage-s3-resiliency-expertise S3 resiliency, security, and data protection review. Assesses one or many S3 buckets across nine dimensions — versioning, replication, object lock, encryption, block public access, bucket policy, ownership controls, server access logging, and static website hosting — using read-only control-plane API calls, then produces a rated report with prioritized findings and remediation guidance. Single-bucket and multi-bucket (fleet) reviews are routed automatically by input count.
Use when a user asks to review, audit, or assess an S3 bucket's resiliency, security, data protection, recovery posture, disaster recovery readiness, or audit posture, or asks about any of those nine features. Triggers on phrasings like "S3 resiliency review", "is my bucket safe", "audit S3 bucket security", "review these buckets: A, B, C", or "check versioning/replication/encryption/public access".
Do NOT use for cost optimization, performance tuning, or EFS, FSx, AWS Backup, or Storage Gateway.
Database-level data-plane diagnostics for Aurora MySQL and Aurora PostgreSQL. Executes predefined read-only health check queries via RDS Data API to analyze buffer pool, connections, locks, replication, storage, performance, and index efficiency. Requires the rds-aidba MCP server for database-internal access beyond what CloudWatch and RDS APIs provide.
