mastering-aws-cli

AWS CLI v2 quick-reference for experienced developers. Covers compute (Lambda, ECS, EKS), storage (S3, DynamoDB, Aurora), networking (VPC, SSM tunneling), security (IAM, Secrets Manager), and GitHub Actions CI/CD. Use when asked to "write aws commands", "debug aws access", "set up cross-account roles", "configure aws cli", "assume role", "S3 bucket operations", or "deploy to ECS".

跳到安装

仓库: SpillwaveSolutions/mastering-aws-cli
最近来源活动: 2025年12月29日 16:29
检测到的 SKILL.md 语言: 英语
星标: 8
分支: 2

安装方式

默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

直接命令不会经过审查 Prompt；运行前请先检查来源。

npx skills add https://github.com/SpillwaveSolutions/mastering-aws-cli --skill mastering-aws-cli

命令会保持在同一行。复制前请横向滚动并检查完整内容。

想先保存到本地？可下载 SkillsMP 当前能够提供的文件。

检查来源文件

决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。

SKILL.md

来源说明 · 只读预览

返回搜索返回安装

AWS CLI v2 Quick Reference

A unified tool to manage AWS services from the terminal. This guide focuses on CLI v2 features, practical examples, and advanced patterns for experienced developers.

Quick Start

# Verify installation and version aws --version # Interactive configuration aws configure # Access keys + region + output format aws configure sso # IAM Identity Center (SSO) - recommended # Verify identity aws sts get-caller-identity # Shows Account, UserId, ARN # Enable auto-prompt for command discovery aws dynamodb --cli-auto-prompt

Power User Tips

# See all waiter commands for a service aws ec2 wait help # Generate command skeleton (fill in the blanks) aws lambda create-function --generate-cli-skeleton > create-fn.json # Create CLI alias for common commands aws configure set cli_alias.whoami "sts get-caller-identity" aws whoami # Now works! # Disable pager for scripting export AWS_PAGER=""

See Advanced Patterns for JMESPath mastery and automation tricks.

Global Options

Flag

Description

--profile NAME

Use named profile from ~/.aws/credentials

--region REGION

Override default region (e.g., us-east-1)

--output FORMAT

Output: json (default), text, table, ,

AWS CLI v2 Quick Reference

A unified tool to manage AWS services from the terminal. This guide focuses on CLI v2 features, practical examples, and advanced patterns for experienced developers.

Quick Start

Power User Tips

See Advanced Patterns for JMESPath mastery and automation tricks.

Global Options

Flag

Description

--profile NAME

Use named profile from ~/.aws/credentials

--region REGION

Override default region (e.g., us-east-1)

--output FORMAT

Output: json (default), text, table, ,

name	mastering-aws-cli
description	AWS CLI v2 quick-reference for experienced developers. Covers compute (Lambda, ECS, EKS), storage (S3, DynamoDB, Aurora), networking (VPC, SSM tunneling), security (IAM, Secrets Manager), and GitHub Actions CI/CD. Use when asked to "write aws commands", "debug aws access", "set up cross-account roles", "configure aws cli", "assume role", "S3 bucket operations", or "deploy to ECS".
triggers	["aws cli","aws command line","aws commands","ec2","s3","lambda","iam","eks","ecs","ecr","dynamodb","rds","aurora","glue","msk","kinesis","ssm","secrets manager","parameter store","vpc","cloudwatch","sts","assume role","aws configure","aws sso","github actions aws","oidc aws","bastion","ssm tunnel","kubectl eks"]
category	cloud-infrastructure
license	MIT
allowed-tools	["Read","Bash","WebFetch"]
metadata	{"version":"2.1.0","author":"Spillwave"}

name	mastering-aws-cli
description	AWS CLI v2 quick-reference for experienced developers. Covers compute (Lambda, ECS, EKS), storage (S3, DynamoDB, Aurora), networking (VPC, SSM tunneling), security (IAM, Secrets Manager), and GitHub Actions CI/CD. Use when asked to "write aws commands", "debug aws access", "set up cross-account roles", "configure aws cli", "assume role", "S3 bucket operations", or "deploy to ECS".
triggers	["aws cli","aws command line","aws commands","ec2","s3","lambda","iam","eks","ecs","ecr","dynamodb","rds","aurora","glue","msk","kinesis","ssm","secrets manager","parameter store","vpc","cloudwatch","sts","assume role","aws configure","aws sso","github actions aws","oidc aws","bastion","ssm tunnel","kubectl eks"]
category	cloud-infrastructure
license	MIT
allowed-tools	["Read","Bash","WebFetch"]
metadata	{"version":"2.1.0","author":"Spillwave"}

Reference	Description	Key Triggers
Setup	Installation, configuration, profiles, SSO	`install`, `configure`, `sso`, `profile`
IAM & Security	Roles, policies, STS, MFA, cross-account	`iam`, `role`, `policy`, `sts`, `assume-role`
Lambda	Functions, layers, aliases, URLs, events	`lambda`, `serverless`, `function`
ECS	Clusters, tasks, services, Fargate	`ecs`, `fargate`, `task`, `container`
EKS	Clusters, node groups, kubeconfig, IRSA	`eks`, `kubernetes`, `kubectl`, `k8s`
ECR	Repositories, auth, scanning, lifecycle	`ecr`, `docker`, `registry`, `image`
S3	Buckets, objects, sync, presign, lifecycle	`s3`, `bucket`, `upload`, `sync`
DynamoDB	Tables, items, queries, streams, backups	`dynamodb`, `ddb`, `nosql`
Aurora/RDS	Clusters, serverless v2, cloning, blue-green	`rds`, `aurora`, `mysql`, `postgresql`
Glue	Catalog, crawlers, ETL jobs, workflows	`glue`, `etl`, `catalog`, `crawler`
MSK	Kafka clusters, serverless, configuration	`msk`, `kafka`, `streaming`
Kinesis	Data streams, Firehose, consumers	`kinesis`, `stream`, `firehose`
Secrets & Params	Parameter Store, Secrets Manager, rotation	`ssm`, `secrets`, `parameter`, `rotation`
VPC & Networking	VPCs, subnets, security groups, endpoints	`vpc`, `subnet`, `security-group`, `endpoint`
Bastion & Tunneling	SSM Session Manager, port forwarding	`bastion`, `tunnel`, `ssm`, `ssh`
GitHub CI/CD	OIDC, GitHub Actions, CodeBuild	`github`, `actions`, `oidc`, `cicd`
Advanced Patterns	JMESPath, waiters, skeletons, aliases	`jmespath`, `query`, `waiter`, `alias`

Variable	Purpose	Example
`AWS_ACCESS_KEY_ID`	Access key for authentication	`AKIAIOSFODNN7EXAMPLE`
`AWS_SECRET_ACCESS_KEY`	Secret key for authentication	`wJalrXUtnFEMI/...`
`AWS_SESSION_TOKEN`	Session token (temporary credentials)	For STS assume-role
`AWS_PROFILE`	Named profile to use	`production`
`AWS_REGION`	AWS region for requests	`us-west-2`
`AWS_DEFAULT_OUTPUT`	Default output format	`json`, `text`, `table`
`AWS_PAGER`	Pager program (empty to disable)	`""`
`AWS_CONFIG_FILE`	Custom config file path	`~/.aws/config`
`AWS_SHARED_CREDENTIALS_FILE`	Custom credentials file path	`~/.aws/credentials`
`AWS_CA_BUNDLE`	Custom CA certificate bundle	`/path/to/cert.pem`
`AWS_RETRY_MODE`	Retry mode	`standard`, `adaptive`

Category	Recommendation
Security	Use `aws configure sso` over long-lived access keys
Security	Use IAM roles for compute (EC2/Lambda/ECS) instead of embedded keys
Security	Enable MFA for sensitive operations
Scripting	Use `--output json` or `--output text` for parsing
Scripting	Use `--query` to filter data and reduce output
Safety	Use `--dry-run` before destructive operations
Performance	Use `--page-size` to control memory on large lists
Regions	Explicitly set region in scripts to avoid surprises
Cost	Use lifecycle policies (S3/ECR) for automatic cleanup
Debugging	Use `--debug` to see raw HTTP requests/responses

mastering-aws-cli

安装方式

检查来源文件

AWS CLI v2 Quick Reference

Quick Start

Power User Tips

Global Options

AWS CLI v2 Quick Reference

Quick Start

Power User Tips

Global Options

Decision Trees

Compute & Containers

Data & Storage

Streaming & Messaging

Security & Access

Reference File Navigation

Environment Variables

Credential Precedence

Common Patterns

Profile Switching

Output Filtering with JMESPath

Wait for Resource State

Best Practices

Common Errors Quick Reference

When Not to Use

Quick Command Reference

Error	Cause	Fix
`ExpiredToken`	Session credentials expired	Run `aws sso login` or `aws sts get-session-token`
`AccessDenied`	Missing IAM permissions	Check IAM policy; use `--debug` to see required action
`InvalidClientTokenId`	Invalid access key	Verify `AWS_ACCESS_KEY_ID` or run `aws configure`
`UnauthorizedAccess`	Wrong region or account	Check `--region` flag and `aws sts get-caller-identity`
`ThrottlingException`	API rate limit exceeded	Add retry logic with exponential backoff
`NoCredentialProviders`	No credentials found	Check credential chain; run `aws configure list`

mastering-aws-cli

来源信息

安装方式

检查来源文件

AWS CLI v2 Quick Reference

Quick Start

Power User Tips

Global Options

AWS CLI v2 Quick Reference

Quick Start

Power User Tips

Global Options

Decision Trees

Compute & Containers

Data & Storage

Streaming & Messaging

Security & Access

Reference File Navigation

Environment Variables

Credential Precedence

Common Patterns

Profile Switching

Output Filtering with JMESPath

Wait for Resource State

Best Practices

Common Errors Quick Reference

When Not to Use

Quick Command Reference