mcpField
C
creating-production-vpc-multi-az

creating-production-vpc-multi-az

github.com/awsCloud & DevOps3.3k6.3k installsUpdated 1d ago
Repository

About creating-production-vpc-multi-az

A skill for creating production VPC infrastructure across multiple AWS Availability Zones. It guides users through subnet layout, NAT gateways, routing, and tiered security groups.

Key features

  1. 01Create a VPC with DNS support
  2. 02Plan public and private subnets
  3. 03Configure highly available NAT gateways
  4. 04Set up route tables
  5. 05Create tiered security groups

Use cases

  1. 01Deploy a production network across Availability Zones
  2. 02Configure outbound access for workloads
  3. 03Set network access rules by environment

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aws/agent-toolkit-for-aws --skill creating-production-vpc-multi-az

After installing, type/creating-production-vpc-multi-azin Claude Code to confirm it loaded.

Bundled filesreferences/create-production-vpc-multi-az.md

Details

From the project README

Creating a Production-Ready VPC Across Multiple Availability Zones

Overview

Domain expertise for creating production-ready VPC infrastructure distributed across multiple Availability Zones. Covers VPC creation with DNS support, public and private subnet layout with automatic CIDR calculation, internet gateway, NAT gateways for high-availability outbound access, route table configuration, and tiered security groups following AWS Well-Architected principles.

Create a production VPC

To create a fully configured multi-AZ VPC with public/private subnets, NAT gateways, route tables, and security groups, follow the procedure exactly. See Production VPC creation procedure.

Key parameters:

  • vpc_name (required): Name prefix for all resources
  • region (required): Target AWS region
  • allowed_web_cidrs (required): CIDR blocks allowed for web access — allow 0.0.0.0/0 only if explicitly requested
  • vpc_cidr (optional, default 10.0.0.0/16): VPC CIDR block
  • availability_zones (optional, default 3): Number of AZs (2–6)
  • environment (required): Environment tag
  • enable_ssh_access (optional, default false): Whether to create SSH security group

Troubleshooting

Insufficient Availability Zones

The target region must have at least 2 available AZs. Use aws ec2 describe-availability-zones to verify.

NAT Gateway creation delays

NAT Gateways can take several minutes to become available. The procedure waits for availability before configuring route tables.

Security group CIDR warnings

The procedure warns about 0.0.0.0/0 for web access CIDRs and recommends specific IP ranges for production workloads, but allows it if explicitly requested.

Comments

Markdown supported