aws-cloud-ops

Name: aws-cloud-ops
Author: oimiragieo

github.com/oimiragieoCloud & DevOps4469 installsUpdated 17w ago

About aws-cloud-ops

aws-cloud-ops is an agent skill for AWS operations that uses AWS CLI v2 across several services. It presents tools by service category and blocks IAM write operations.

Key features

01Manage CloudWatch logs, metrics, and alarms
02Perform S3 object operations
03Inspect and invoke Lambda functions
04Manage EC2 instances
05Read IAM users, roles, and policies
06Require confirmation for destructive operations

Use cases

01Investigate CloudWatch logs and metrics
02Sync directories or copy S3 objects
03Inspect and start or stop EC2 instances

MCP support

The README does not describe an MCP integration.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/oimiragieo/agent-studio --skill aws-cloud-ops

After installing, type/aws-cloud-opsin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

commands/

aws-cloud-ops.md

hooks/

post-execute.cjs

pre-execute.cjs

references/

research-requirements.md

rules/

aws-cloud-ops.md

schemas/

input.schema.json

output.schema.json

scripts/

main.cjs

templates/

implementation-template.md

Details

From the project README

AWS Cloud Operations Skill

Installation

The skill invokes the AWS CLI v2. Install and configure:

Linux x86: Download AWS CLI v2, unzip, then sudo ./aws/install
macOS: curl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "AWSCLIV2.pkg" then run the installer
Windows: Download MSI from AWS CLI v2 or use msiexec; or install via package managers

Configure: aws configure (access key, secret, region). Verify: aws --version

Cheat Sheet & Best Practices

Identity & config: aws sts get-caller-identity — who am I; aws configure list-profiles — list profiles.

S3: aws s3 ls; aws s3 cp <local> s3://bucket/; aws s3 sync ./dir s3://bucket/; aws s3 rm s3://bucket/key.

Lambda: aws lambda list-functions; aws lambda invoke --function-name X output.json; aws lambda get-function --function-name X.

CloudWatch: aws cloudwatch list-metrics; aws cloudwatch get-metric-statistics; aws cloudwatch describe-alarms; put-metric-alarm for alerts.

EC2: aws ec2 describe-instances; start-instances/stop-instances/terminate-instances with --instance-ids.

Best practices: Use IAM roles over long-lived keys; set AWS_REGION/AWS_PROFILE; use --output json and --query to limit response size; run destructive ops only after describe to confirm resources.

Certifications & Training

Free: AWS Skill Builder — exam prep, Cloud Quest, Cloud Essentials. Cloud Practitioner (CLF-C02): Cloud concepts, security/compliance, technology/services, billing (~6 months exposure). Solutions Architect Associate: Next step; prep on Skill Builder.

Skill data: Map to S3, Lambda, CloudWatch, EC2, IAM; security best practices; no hardcoded credentials.

Hooks & Workflows

Suggested hooks: Pre-deploy: validate credentials (aws sts get-caller-identity). Cost-tracking hook: optional CloudWatch/billing checks. No mandatory hook; use when devops is routed for AWS tasks.

Workflows: Use with devops (contextual: aws_project). Flow: detect AWS project → load aws-cloud-ops → run CLI via skill script. See operations/incident-response if debugging AWS resources.

Overview

Provides 90%+ context savings vs raw AWS MCP server. Multi-service support with progressive disclosure by service category.

Requirements

AWS CLI v2
Configured credentials (AWS_PROFILE or ~/.aws/credentials)
AWS_REGION environment variable

Tools (Progressive Disclosure)

CloudWatch Operations

Tool	Description	Confirmation
logs-groups	List log groups	No
logs-tail	Tail log stream	No
logs-filter	Filter log events	No
metrics-list	List metrics	No
metrics-get	Get metric data	No
alarm-list	List alarms	No
alarm-create	Create alarm	Yes

S3 Operations

Tool	Description	Confirmation
s3-ls	List buckets/objects	No
s3-cp	Copy objects	Yes
s3-sync	Sync directories	Yes
s3-rm	Delete objects	Yes

Lambda Operations

Tool	Description	Confirmation
lambda-list	List functions	No
lambda-get	Get function details	No
lambda-invoke	Invoke function	Yes
lambda-logs	Get function logs	No

EC2 Operations

Tool	Description	Confirmation
ec2-list	List instances	No
ec2-describe	Describe instance	No
ec2-start	Start instance	Yes
ec2-stop	Stop instance	Yes
sg-list	List security groups	No

IAM Operations (Read-Only)

Tool	Description	Confirmation
iam-users	List users	No
iam-roles	List roles	No
iam-policies	List policies	No

Quick Reference

# List EC2 instances
aws ec2 describe-instances --output table

# Tail CloudWatch logs
aws logs tail /aws/lambda/my-function --follow

# List S3 buckets
aws s3 ls

# Invoke Lambda
aws lambda invoke --function-name my-func output.json

Configuration

AWS_PROFILE: Named profile to use
AWS_REGION: Target region (e.g., us-east-1)
AWS_DEFAULT_OUTPUT: Output format (json/table/text)

Security

⚠️ Never hardcode credentials ⚠️ Use IAM roles when possible ⚠️ IAM write operations are blocked

Agent Integration

devops (primary): Cloud operations
cloud-integrator (primary): Multi-cloud
incident-responder (secondary): Troubleshooting

Troubleshooting

Issue	Solution
Access denied	Check IAM permissions
Region error	Set AWS_REGION
Credentials	Run aws configure

Memory Protocol (MANDATORY)

Before starting: Read .claude/context/memory/learnings.md

After completing:

New pattern -> .claude/context/memory/learnings.md
Issue found -> .claude/context/memory/issues.md
Decision made -> .claude/context/memory/decisions.md

ASSUME INTERRUPTION: If it's not in memory, it didn't happen.

Comments

Markdown supported

Details

Author: oimiragieo
Repository: oimiragieo/agent-studio
Category: Cloud & DevOps
Installs: 69
GitHub stars: 44

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.