agentleFS
Sign inStart free
fmindfmind/dot/skills/aws/SKILL.md

aws

Skill13 starsChanged 4 days agoMITView on GitHub

Operate AWS accounts and SSO profiles with the aws CLI.

17 other projects use a version of this.

Adopted by

Most recently taken up by

Used with

Projects with it also use azure, mongodb and 5 more.

Other files people use alongside this one.

Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
  • ffsshhttiikkSkill

    azure

    Microsoft Azure cloud services and best practices

    Also in 4 projects that use this

  • hoodiniSkill

    mongodb

    Work with MongoDB databases using best practices. Use when designing schemas, writing queries, building aggregation pipelines, or optimizing performance. Triggers on MongoDB, Mongoose, NoSQL, aggregation pipeline, document database, MongoDB Atlas.

    Also in 3 projects that use this

  • Sorcha-PlatformSkill

    redis

    Implements Redis caching, session management, and distributed coordination for the Sorcha platform. Use when: Adding caching layers, token revocation, rate limiting, SignalR backplane, or distributed state.

    Also in 3 projects that use this

  • OpenAISkill

    observability

    Vercel Observability expert guidance — Drains (logs, traces, speed insights, web analytics), Web Analytics, Speed Insights, runtime logs, custom events, OpenTelemetry integration, and monitoring dashboards. Use when instrumenting, debugging, or optimizing application performance and user experience on Vercel.

    Also in 4 projects that use this

  • klauswgSkill

    performance

    Optimize web performance for faster loading and better user experience. Use when asked to "speed up my site", "optimize performance", "reduce load time", "fix slow loading", "improve page speed", or "performance audit".

    Also in 3 projects that use this

  • 0xSeroSkill

    security

    Also in 3 projects that use this

The file

We split this skill into the rules it gives an agent

3 rules. 0 are common, 0 are distinctive, and 3 are very specific to this project.

  • 0

    Common

    Most of the 15 edited versions we read keep these.

  • 0

    Distinctive

    This author's own choices. Worth a look.

  • 3

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Very specific:

    Use aws for AWS account, IAM, S3, ECS, and CloudWatch operations.

    line 15
  2. Very specific:

    Authenticate via SSO: when credentials expire, refresh the session using AWS IAM Identity Center (SSO).

    line 26
  3. Very specific:

    Start read-only with bounded queries: use --query (JMESPath) and --max-items to constrain results.

    line 35

“Common” is measured: kept by at least 6 in 10 of the 15 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Amazon Web Services CLI

Use aws for AWS account, IAM, S3, ECS, and CloudWatch operations.

Workflow

  1. Resolve identity and profile context: inspect the active AWS profile, SSO session, and caller identity; never assume role or run commands under ambiguous profiles.

    aws sts get-caller-identity --profile <profile> --output json --no-cli-pager
aws configure list-profiles

  2. Authenticate via SSO: when credentials expire, refresh the session using AWS IAM Identity Center (SSO); avoid long-lived access keys. When Identity Center is unavailable, aws login exchanges a console sign-in for short-lived credentials; add --remote on a host without a local browser.

    aws sso login --profile <profile>
# Without Identity Center:
aws login --profile <profile>
  3. Pin every consequential call: pass --profile <name> and --region <region> explicitly so environment variables or shell defaults cannot redirect operations to the wrong account or region.

  4. Start read-only with bounded queries: use --query (JMESPath) and --max-items to constrain results; describe resources, IAM policies, and CloudWatch metrics before changing anything.

    aws s3 ls --profile <profile> --region <region> --no-cli-pager
aws ecs list-clusters --profile <profile> --region <region> --max-items 20 --output json --no-cli-pager
  5. Authorize mutations: resource creation, security group changes, policy updates, and deletions require user authorization; reuse existing authority rather than asking again.

Gotchas

  • --query runs client-side: select needed fields and pair with supported server-side filters and --max-items; --page-size only changes request size, not total results. Preserve NextToken in projections, report capped results as partial, and resume deliberately when completeness is required. Use --no-cli-pager --cli-error-format json for agent calls so service and credential errors return a parseable Code and Message; avoid debug output around credentials.
  • Failures are findings: report authorization (AccessDeniedException) or missing role errors directly; do not attempt permission escalation or modify IAM policies without authorization.

Official Skills

AWS publishes agent skills through the Agent Toolkit. Review candidates read-only with aws agent-toolkit list-available-skills or search-skills --search-query <topic>, get-skill-metadata --skill-name <name> (version and file list), and aws agent-toolkit get-skill-file --skill-name <name> --file-path SKILL.md --skill-version <version>, then install only through the shared vendor-skill policy. Never run aws configure agent-toolkit --yes: it installs default skills into every detected agent and configures the AWS MCP server. The workstation sets AWS_CLI_AGENT_TOOLKIT_HINT_DISABLED=true to suppress the toolkit prompt.

Documentation

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free