aws-network-monitoring

Name: aws-network-monitoring
Author: aws

github.com/awsCloud & DevOps3.3k5.0k installsUpdated 1d ago

About aws-network-monitoring

A skill for installing and configuring Amazon CloudWatch Network Flow Monitor agents on EC2 instances, intended for AWS users monitoring network paths. It covers IAM permissions, installation, activation, verification, and troubleshooting.

Key features

01Install through SSM Distributor or CLI
02Configure IAM permissions for metric publishing
03Activate and verify agent status
04Troubleshoot 403, missing metrics, and connectivity

Use cases

01Deploy network monitoring agents on EC2
02Set least-privilege permissions for metric publishing
03Verify that agents publish metrics
04Investigate missing network monitoring data

MCP support

With the AWS MCP server, it can run SSM commands, attach IAM policies, and validate agent status; standard AWS CLI access is also supported.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aws/agent-toolkit-for-aws --skill aws-network-monitoring

After installing, type/aws-network-monitoringin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/

agent-install-ec2.md

agent-permissions.md

troubleshooting.md

Details

From the project README

AWS Network Monitoring

Overview

Domain expertise for installing and configuring Amazon CloudWatch Network Flow Monitor agents on EC2 instances. Covers IAM permission setup, agent installation via SSM Distributor or command-line install, agent activation, verification, and troubleshooting.

Network Flow Monitor agents are lightweight software that publish performance metrics (latency, packet loss) to the Network Flow Monitor backend, enabling monitoring of network path health between workloads.

Works best with the AWS MCP server — enables running SSM commands, attaching IAM policies, and validating agent status directly. All guidance also works with standard AWS CLI access.

Routing

User need	Action
Installing Network Flow Monitor agents on EC2	Read agent-install-ec2.md
Configuring IAM for Network Flow Monitor agents	Read agent-permissions.md
Troubleshooting Network Flow Monitor agents (403, no metrics, connectivity)	Read troubleshooting.md
Spans multiple areas	Read the most specific reference first, then consult others as needed

Files

File	Content
agent-install-ec2.md	End-to-end Network Flow Monitor agent installation via SSM Distributor, activation, verification
agent-permissions.md	IAM policy setup for Network Flow Monitor agent metric publishing
troubleshooting.md	Error → cause → fix for Network Flow Monitor agent issues (HTTP 403, missing metrics, connectivity)

Supported versions

For supported Linux distributions, kernel versions, and architectures, see the AWS documentation. Windows is not supported.

Security Considerations

Least-privilege IAM: Attach only CloudWatchNetworkFlowMonitorAgentPublishPolicy for publishing metrics and AmazonSSMManagedInstanceCore for SSM management. Do not use *FullAccess policies.
Private subnets: When the instance is in a private subnet, prefer VPC endpoints for SSM (com.amazonaws.<region>.ssm, .ssmmessages, .ec2messages) over a NAT gateway to keep traffic on the AWS network.
Credential storage: Never embed AWS credentials on the instance; the publish policy MUST be attached to the instance role, not configured as static keys.
Audit trail: Ensure CloudTrail is enabled in the account so SSM SendCommand invocations and IAM AttachRolePolicy actions performed during agent setup are logged for security investigations.
References: CloudWatch Network Flow Monitor security, IAM best practices

Comments

Markdown supported

Details

Author: aws
Repository: aws/agent-toolkit-for-aws
Category: Cloud & DevOps
Installs: 4,966
GitHub stars: 3,330

Report

More skills

All skills

lark-apps

open.feishu.cn

732.0k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

azure-prepare

github.com/microsoft

571.7k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

wizard

github.com/mattpocock

571.5k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-ai

github.com/microsoft

571.2k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.