Aws技能

用于扩展现有代理项目，支持记忆、应用集成、VPC、多代理、迁移、模型、浏览器、代码解释器、支付或资源等功能……

当需要通过Gateway将您的agent连接到外部API、工具或服务，或使用Cedar策略限制工具访问时使用。处理网关设置、目标…

当您的代理或环境出现故障时使用——错误答案、报错、超时、工具失败或CLI问题。读取追踪和日志以诊断根本原因。…

在将您的代理部署到AWS时使用，或当部署失败时使用。处理预检验证、CDK/IAM/配额错误诊断、版本管理、回滚等。

Use when a developer wants to create a new agent project or get started with AgentCore. Handles framework selection, project scaffolding, first deploy, and…

Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle, rate…

Use when measuring or improving agent quality and performance — set up evaluators, online monitoring, CI/CD quality gates, observability, or cost optimization.…

Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments, and applying…

Amazon Aurora MySQL — 专门创建、修改并提供有关 Aurora MySQL 集群的建议（MySQL 兼容引擎、Aurora Serverless、并行查询）。…

Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora serverless, express…

在Amazon Bedrock上构建生成式AI应用。涵盖模型调用（Converse API、InvokeModel）、基于知识库的RAG、Bedrock Agents、Guardrails等。

端到端管理Amazon DocumentDB——无服务器8.0集群设置、TLS/VPC/驱动配置、灵活模式与向量搜索数据建模、MongoDB…

Designs, reviews, and debugs DynamoDB data layers from design axioms — enumerates access patterns, chooses partition/sort keys and GSIs, decides single-table…

当开发者存在潜在的缓存需求时激活：API响应缓慢、数据库读取瓶颈、DynamoDB节流或成本问题、RDS/Aurora扩展压力等。

提供针对Amazon Keyspaces的权威兼容性检查、定价估算、连接故障排除、预热指导和基础设施变更。

Amazon OpenSearch Service 和 Serverless 涵盖五项能力——迁移（将 Solr/ES/自管理 OpenSearch 迁移至 AOS/AOSS、schema/查询转换、容量规划、…）

配置Amazon SES V2用于生产环境邮件发送——包括域名身份创建、DKIM/SPF/DMARC验证、一次性DNS记录展示……

Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness,…

回答关于Amazon Application Recovery Controller（ARC）区域切换的问题，包括架构、计划、执行块、工作流、触发器等内容。

Provisions and manages Aurora DSQL clusters, connects via psql or DSQL Connectors, manages schemas, runs queries, migrates from MySQL, diagnoses query plans,…

Selects, deploys, and customizes AI models on Amazon SageMaker. Fine-tuning (SFT, DPO, RLVR, RLAIF), model selection, dataset preparation, evaluation,…

Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync/DynamoDB), storage (S3),…

使用Amazon Cognito（用户池和身份池）及AWS Amplify客户端认证库，为Web和移动应用添加用户认证。涵盖……

分析 AWS 成本、寻找节省机会、管理预算、评估 Savings Plans 和预留实例、使用 Compute Optimizer 调整 EC2/Lambda/RDS/EBS 大小、查找…

Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks…

Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct patterns.…

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch…

编写、验证并排查 AWS CloudFormation 模板。涵盖采用安全默认值的模板编写、部署前验证（cfn-lint、…

配置、扩展并运维Amazon EC2虚拟机工作负载：实例类型选择（Graviton/Arm64、可突增T积分、GPU、实例存储与…

在ECS、Fargate和ECR上部署并运维容器化工作负载。涵盖任务定义、Fargate服务、ECR仓库设置及生命周期策略，…

将涉及AWS数据库的任何任务——选择、比较、推荐、入门使用或操作数据库——路由到相应的服务特定…

Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables,…

Verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits,…

使用AWS Lambda持久函数构建弹性、长时间运行的多步骤应用程序，具备自动状态持久化、重试逻辑和编排功能，用于…

评估、配置并将工作负载迁移至 AWS Lambda Managed Instances (LMI)。在用户账户内的 EC2 实例上运行 Lambda 函数，同时由 AWS…

在AWS Lambda MicroVMs上构建、运行、调试和操作应用程序——这些是Firecracker隔离、支持快照恢复的无服务器计算环境，运行在……

Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon…

Installs, configures, and troubleshoots Network Flow Monitor agents on EC2 instances to monitor network path health. Covers agent installation, IAM…

Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS Firewall),…

使用CloudWatch（日志洞察、指标、告警、仪表盘、EMF）、X-Ray、CloudTrail和ADOT（AWS…）构建、配置、调试和优化AWS可观测性。

指导端到端的AWS韧性生命周期，集成Resilience Hub v2、Fault Injection Service和Application Recovery Controller。涵盖Define →…

AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages (aws-sdk-js-v3),…

AWS SDK for Python（boto3/botocore）开发模式。在编写通过boto3或botocore使用AWS服务的Python代码时，您必须使用此技能。此…

AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package.

AWS Secrets Manager 的机密安全保护，涵盖机密管理、凭证、API 密钥、令牌和密码。防止 AI 代理直接获取机密值…

Covers AWS security services and workflows — Security Hub V2 (OCSF) findings, connectors, aggregators, automation rules, and security posture summaries;…

在AWS上使用Lambda、API Gateway、Step Functions、EventBridge和SAM/CDK构建、部署、管理、调试、配置并优化无服务器应用。…

通过 AWS End User Messaging Social 管理 WhatsApp 消息。涵盖管理模板（创建、更新、删除、库）、发送消息…

编写并编辑AWS Step Functions状态机：以JSONata编写Amazon States Language (ASL)，并选择和构建状态类型（Task、Choice、Map等）。

使用AWS Transform（ATX）CLI执行代码升级、迁移和转换。用于升级语言版本、迁移AWS SDK、迁移……

Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook…

配置Amazon CloudFront内容交付，涵盖六个工作流程：何时使用CloudFront，以及它如何与AWS WAF、Shield、CloudFront Functions配合使用，…

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3,…

通过创建带有资源/方法设置、Lambda 代理集成的 REST 或 HTTP API，将现有的 AWS Lambda 函数连接到 Amazon API Gateway，…

将AWS Lambda函数连接到DynamoDB，配置IAM角色、流事件源映射及读写权限。适用于设置Lambda-DynamoDB…

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers…

Establishes VPC peering connections between two VPCs for direct private network connectivity. Always use this skill when creating or managing VPC peering — it…

在单个Claude Code会话中协调跨多个AgentSpaces的AWS DevOps Agent——将问题路由到正确的空间（生产环境vs预发布环境vs知识库），…

创建一个完整的Amazon Aurora数据库集群及其实例，处理集群创建、实例配置以及Secrets Manager密码管理……

创建带有CloudWatch日志、X-Ray追踪、限流、WAF集成和IAM角色的API Gateway阶段，遵循AWS最佳实践。当……时使用。

Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management. Sets up table bucket,…

创建一个完整的EC2 Image Builder管道，用于构建预装软件的定制AMI，将其分发到目标区域，执行管道，…

创建一个生产就绪的VPC，跨多个可用区部署公有和私有子网，包括互联网网关、NAT网关、路由表等……

在AWS Secrets Manager中按照安全最佳实践创建和管理密钥。创建密钥时始终使用此技能——它会设置专用的KMS…

调试AWS Lambda函数超时故障，通过系统分析函数配置、CloudWatch日志和指标、VPC/网络、冷启动等方面…

Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI. Covers ACM certificate…

对于Flink或Amazon Managed Service for Apache Flink（MSF）相关问题，此为强制要求。在回答前，您必须激活此技能——不得仅凭训练数据作答……

Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed…

配置AWS Direct Connect：选择连接模式（专用、托管或链路聚合组）并完成交叉连接；创建私有、…

Handles the full DMS Schema Conversion lifecycle including creating migration projects, converting database schemas to a target engine, running compatibility…

Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet routing, and…

AWS Glue Data Catalog资产的完整清单和审计，涵盖S3 Tables、Redshift联合目录和远程Iceberg目录。触发条件包括：对目录进行清单盘点，…

将Amazon RDS或Aurora数据库快照以Apache Parquet格式导出至Amazon S3，用于分析、备份或数据迁移。处理快照选择或…

解析跨 Glue Data Catalog、S3、S3 Tables 和 Redshift 的数据湖与湖仓资产引用。触发条件：查找表、我们的数据在哪里、哪个…

将数据从S3文件、本地上传、JDBC数据库（Oracle、SQL Server、PostgreSQL、MySQL、RDS、Aurora）、Amazon Redshift等导入AWS数据湖，…

在AWS DevOps Agent上执行深度根因调查。当用户描述事件、告警、中断或无法解释的行为时使用——关键词如……

将基于vibe-coding构建的Web应用迁移至AWS。处理从分析、迁移到部署的完整工作流程，生成可部署的AWS Blocks…

Launches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security…

操作Amazon MSK Provisioned集群（Standard和Express代理）。任何MSK Provisioned任务都需要此技能——训练数据混淆了Standard和Express，…

Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual input),…

Helps migrate self-managed Apache Kafka workloads to Amazon MSK Express. Inventories the source cluster (from IaC files, Kafka CLI output, or manual input),…

Guides an end-to-end data-warehouse migration to Amazon Redshift — discovery, schema/SQL/stored-procedure/macro/script conversion, data migration, validation,…

配置AWS Network Firewall，即托管的无状态VPC防火墙：部署防火墙并通过其端点路由流量；集中检查……

Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the…

Deploy an event-driven workflow that routes S3 uploads to either Lambda or Fargate via Step Functions based on file size. Uses EventBridge to trigger a Step…

对导出为S3 Tables中Apache Iceberg表的CloudWatch Logs数据运行SQL查询。涵盖VPC Flow Logs、WAF日志、CloudFront访问日志、Route 53…

查询S3对象元数据，跟踪存储桶活动，审计对象变更，搜索注释，并使用S3 Metadata系统表分析存储指标…

对SageMaker Catalog资产元数据表（以Apache Iceberg格式导出至S3 Tables）运行SQL分析，涵盖治理查询、资产增长追踪等。

Execute and manage Athena SQL queries across default and federated catalogs (Glue, S3 Tables, Redshift). Triggers on phrases like: query data, run SQL, athena…

Provisions, connects, migrates, and operates Amazon RDS for Db2. Applies when provisioning with IBM customer and site IDs (License Manager, BYOL, GovCloud),…

诊断并解决Amazon RDS for Oracle的连接、认证、网络和驱动程序问题。适用于任何RDS-for-Oracle相关问题…

Advises on Amazon RDS open-source engines (MySQL, MariaDB, PostgreSQL) for instance creation, upgrade planning, commitment pricing, proxy evaluation, and…

提供针对Amazon RDS for SQL Server的连接、身份验证和故障排除指导。适用于用户询问SSMS连接超时的场景…

配置AWS Application Recovery Controller（ARC）以实现运营韧性：通过带安全规则的路由控制实现跨区域故障转移，以及区域切换……

Amazon Redshift并非PostgreSQL——纠正源自PostgreSQL的LLM错误；涵盖Redshift特有的SQL、DDL、COPY/UNLOAD、系统视图、元数据发现等……

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security…

运行并解读AWS Resilience Hub v2故障模式评估。涵盖启动评估、理解发现（严重性、类别、…

Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys, onboards services with input…

为跨AWS组织的多账户韧性管理配置AWS Resilience Hub v2。涵盖按服务的跨账户权限模型，…

设计韧性计划：如何在组织、团队或项目组合中构建和标准化韧性策略（分层策略模型，包含…

配置Amazon Route 53 DNS：公有和私有记录、流量引导路由策略、健康检查、DNS Firewall、Route 53 Profiles、VPC Resolver……

配置 Amazon Route 53，使用自定义域名将流量路由到 CloudFront 分发。适用于设置 DNS 别名记录、备用域名等场景……

通过 AWS DevOps Agent 使用预配置的测试配置文件运行自动化发布测试（UI 或 API）。当用户想要验证多步骤……

在工作区运行 AWS Security Agent 扫描——将源代码上传至 AWS，使用托管的 Security Agent 服务进行扫描，并返回经过排名和验证的…

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user…

启用多区域AWS CloudTrail跟踪，配备S3日志存储、CloudWatch Logs集成，以及用于安全监控的CloudWatch Logs Insights查询，并…

Sets up notification channels for CloudWatch alarms using SNS topics and subscriptions. Always use this skill when configuring alarm notifications — it creates…

Configures EC2 instances to securely call AWS services by creating and attaching IAM roles via instance profiles, eliminating hardcoded credentials. Use when…

Set up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are missing.

Setup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is broken, or when…

为当前工作区配置 AWS Security Agent — 预置或复用代理空间、IAM 服务角色和 S3 存储桶。当用户要求“设置…

Configures AWS Shield Advanced for enhanced Distributed Denial of Service (DDoS) protection: subscribing accounts and adding resource protections, enabling…

Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation…

Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual private…

使用Amazon S3 Vectors存储和查询向量嵌入，这是一项具有自身API命名空间（s3vectors）的高性价比长期向量存储服务。触发…

对规格/设计文档运行AWS Security Agent威胁模型审查。当用户要求审查规格的安全性、运行威胁模型、检查是否……时使用。

Retrieves authoritative guidance on Amazon Timestream for InfluxDB (managed InfluxDB 2, InfluxDB 2 Read Replica Clusters, InfluxDB 3 Core and Enterprise).…

Configures AWS Transit Gateway: creating a hub and attaching VPCs, segmenting traffic with route tables, centralizing egress and inspection through a hub…

通过发现和分析CloudWatch日志组来排查失败的应用程序，识别错误模式、根本原因和可行的解决方案。使用…

诊断并解决Amazon EFS问题，包括挂载失败、NFS超时、权限错误、吞吐量问题和突发积分耗尽。当……时使用。

诊断并解决Amazon S3文件问题，包括挂载失败、权限错误、同步问题和性能问题。当用户…时使用。

Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS…