Updated 1d ago
by aws
agent-toolkit-for-aws
Official, AWS-supported MCP servers, skills, and plugins to help AI agents build on AWS
2.9k GitHub stars (2,886)
+160 in 20 days
| Period | New stars |
|---|---|
| Sep 27–28 (2 days) | +10 |
| Sep 29 | +6 |
| Sep 30 | +20 |
| Oct 1 | +4 |
| Oct 2 | +12 |
| Oct 3 | +7 |
| Oct 4 | +5 |
| Oct 5 | +11 |
| Oct 6 | +7 |
| Oct 7 | +9 |
| Oct 8 | +8 |
| Oct 9 | +5 |
| Oct 10 | +5 |
| Oct 11 | +6 |
| Oct 12 | +4 |
| Oct 13 | +8 |
| Oct 14 | +13 |
| Oct 15 | +11 |
| Oct 16 | +9 |
- 30 skills (30 skills found in its SKILL.md files)
- 372 forks (372 forks)
- 1d ago last update (Last updated 1d ago)
Install
Skills CLI
npx skills add aws/agent-toolkit-for-aws
Asks which skills and agents to install. Just one: npx skills add aws/agent-toolkit-for-aws --skill amazon-bedrock — add -g for every project.
Claude Code
git clone https://github.com/aws/agent-toolkit-for-awscp -r "agent-toolkit-for-aws/skills/core-skills/amazon-bedrock" ~/.claude/skills/
Copies the amazon-bedrock skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add aws/agent-toolkit-for-aws
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 30 of 177 files.
-
amazon-bedrock
Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents, Guardrails, and AgentCore (including the Harness managed agent loop). Use when invoking models, setting up Knowledge Bases, creating agents, applying guardrails, deploying to AgentCore, migrating/porting/converting a Bedrock Agent (including inline ag…
skills/core-skills/amazon-bedrock/SKILL.md on GitHub (opens in a new tab) -
aws-ai-ml
Selects, deploys, and customizes AI models on Amazon SageMaker. Fine-tuning (SFT, DPO, RLVR, RLAIF), model selection, dataset preparation, evaluation, deployment to SageMaker endpoints or Bedrock, inference optimization and endpoint diagnostics. Covers the full lifecycle from planning through production. Use when fine-tuning models on SageMaker, choosing/selecting which base model to customize or…
skills/core-skills/aws-ai-ml/SKILL.md on GitHub (opens in a new tab) -
aws-auth
Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers sign-up/sign-in flows and the login page (Cognito-hosted UI / managed login), MFA, password policies, OAuth 2.0 / OIDC flows (auth-code + PKCE, client credentials), social/SAML federation, tokens (ID/access/refresh, rotation, revocation, storage), C…
skills/core-skills/aws-auth/SKILL.md on GitHub (opens in a new tab) -
aws-billing-and-cost-management
Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute Optimizer, look up service pricing, query CUR with Athena, detect cost anomalies, scope costs to billing views, and monitor Free Tier usage. Triggers on: AWS bill, cost analysis, reduce spend, savings plan, reserved instance, right-size, budget alert, cost opt…
skills/core-skills/aws-billing-and-cost-management/SKILL.md on GitHub (opens in a new tab) -
aws-blocks
Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks (KVStore, DistributedTable, Database, AuthBasic, AuthCognito, Realtime, AsyncJob, FileBucket, etc.), running local development, or deploying AWS Blocks applications. Also covers AWS Blocks topics with validated, version-specific patterns that preve…
skills/core-skills/aws-blocks/SKILL.md on GitHub (opens in a new tab) -
aws-cdk
Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct patterns. Applies when writing CDK constructs, bootstrapping environments, running cdk deploy/synth/diff, fixing CDK or CloudFormation errors, planning stack structure, importing existing resources, resolving drift, or refactoring stacks without reso…
skills/core-skills/aws-cdk/SKILL.md on GitHub (opens in a new tab) -
aws-cloudformation
Authors, validates, and troubleshoots AWS CloudFormation templates. Covers template authoring with secure defaults, local validation with either cfn-lint or cloudformation-validate, cfn-guard security and compliance checks as a recommended default, account-aware CloudFormation service pre-deployment validation, CloudFormation Express mode for faster deployments, and root-cause diagnosis of failed…
skills/core-skills/aws-cloudformation/SKILL.md on GitHub (opens in a new tab) -
aws-compute
Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance store vs EBS), launch templates, Auto Scaling groups (scaling policies, instance refresh, mixed instances, Spot, warm pools, lifecycle hooks), IMDSv2, placement groups, Elastic IPs, AMI lifecycle, and Systems Manager fleet operations (Session Manager,…
skills/core-skills/aws-compute/SKILL.md on GitHub (opens in a new tab) -
aws-containers
Builds and deploys containerized workloads on Elastic Kubernetes Service (EKS), Elastic Container Service (ECS), Fargate, and ECR (Elastic Container Registry). Covers general EKS knowledge, Karpenter, AWS Load Balancer Controller and leveraging various open source Kubernetes projects with EKS. Covers general ECS knowledge, task definitions, Fargate services, ECS Exec, ECS Express Mode and ECS Man…
skills/core-skills/aws-containers/SKILL.md on GitHub (opens in a new tab) -
aws-database
Routes any task involving AWS databases — choosing, comparing, recommending, getting started with, or operating a database — to the correct service-specific skill. Supersedes general training-data knowledge with post-training service updates, corrected limitations, and decision procedures for relational (Aurora, DSQL, RDS), key-value (DynamoDB), wide-column (Keyspaces), document (DocumentDB), gra…
skills/core-skills/aws-database/SKILL.md on GitHub (opens in a new tab) -
aws-deployment
Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables, execution modes, cross-account), buildspec.yml (caching, VPC, Docker), CodeDeploy strategies (blue/green, canary, linear), CodeArtifact (private package registries, auth tokens, cross-account), and source connections (GitHub, GitLab, Bitbucket).…
skills/core-skills/aws-deployment/SKILL.md on GitHub (opens in a new tab) -
aws-iam
Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits, Organizations quirks, and SAML/MFA specifics. Also provides structured workflows for IAM role management and baseline policy generation from application source code or a Terraform plan JSON. Covers condition operator safety (ForAnyValue/ForA…
skills/core-skills/aws-iam/SKILL.md on GitHub (opens in a new tab) -
aws-messaging-and-streaming
Guides general use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon Data Firehose, Amazon Managed Service for Apache Flink, and Amazon Managed Streaming for Apache Kafka (MSK). Use when reasoning about messaging and streaming patterns. Also identifies which AWS service owns each customer communication channe…
skills/core-skills/aws-messaging-and-streaming/SKILL.md on GitHub (opens in a new tab) -
aws-networking
Routes AWS networking requests to the correct service skill for implementation. Covers Route 53 (DNS, health checks, routing policies, Resolver, DNS Firewall), CloudFront (caching, edge, OAC, mTLS, signed URLs), Transit Gateway (multi-VPC hub, segmentation, centralized egress), Direct Connect (hybrid link, DX Gateway, MACsec), Site-to-Site VPN (IPsec tunnels, static or BGP), WAF (web ACLs, AWS Ma…
skills/core-skills/aws-networking/SKILL.md on GitHub (opens in a new tab) -
aws-observability
Builds, configures, debugs, and optimizes AWS observability — operator-symptom questions and detecting Omni vs classic CloudWatch. CloudWatch: Log Insights, alarms, Dynamic Instrumentation, and Application Signals — instrumenting/onboarding a service to Application Signals with ADOT on EC2/ECS/EKS/Lambda: auto-instrumentation, monitored service, reporting telemetry, ServiceEvents, CI/CD metadata,…
skills/core-skills/aws-observability/SKILL.md on GitHub (opens in a new tab) -
aws-sdk-js-v3-usage
AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages (aws-sdk-js-v3), or when asked about schemas, runtime validation, serialization, or code generation in the context of the JS/TS AWS SDK.
skills/core-skills/aws-sdk-js-v3-usage/SKILL.md on GitHub (opens in a new tab) -
aws-sdk-python-usage
AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore. This includes creating service clients or resources, configuring sessions and credentials, handling errors with ClientError, using paginators and waiters, S3 file transfers and presigned URLs, DynamoDB table operations, and any boto3/botocore cli…
skills/core-skills/aws-sdk-python-usage/SKILL.md on GitHub (opens in a new tab) -
aws-sdk-swift-usage
AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package.
skills/core-skills/aws-sdk-swift-usage/SKILL.md on GitHub (opens in a new tab) -
aws-security
Covers AWS security services and workflows — Security Hub V2 (OCSF) findings, connectors, aggregators, automation rules, and security posture summaries; Security Hub CSPM (V1/ASFF) controls and compliance standards; GuardDuty threat findings; Inspector vulnerability findings; Macie sensitive data findings; Detective investigation; and Security Lake configuration and data aggregation. Applicable w…
skills/core-skills/aws-security/SKILL.md on GitHub (opens in a new tab) -
aws-serverless
Builds, deploys, manages, debugs, configures, and optimizes serverless applications on AWS using Lambda, API Gateway, Step Functions, EventBridge, and SAM/CDK. Covers cold starts, CORS debugging, event source mappings, troubleshooting, concurrency, SnapStart, Powertools, function URLs, EventBridge Scheduler, Lambda layers, and production readiness. Triggers on mentions of Lambda, API Gateway, Ste…
skills/core-skills/aws-serverless/SKILL.md on GitHub (opens in a new tab) -
aws-storage
Selects, investigates, and compares AWS object, file, and block storage services, and answers cost, performance, configuration, security, and troubleshooting questions about storage services. Applies when a user asks where to store or archive data based on their usage patterns; which storage service to choose or how two compare; how to migrate data from on-premises or between AWS services; how to…
skills/core-skills/aws-storage/SKILL.md on GitHub (opens in a new tab) -
aws-well-architected-review
Performs a full AWS Well-Architected Framework review evaluating every framework question across all pillars discovered from the live AWS documentation by analyzing code, IaC, and configurations to produce evidence-backed findings with Eisenhower-prioritized remediation. Supports full reviews (every framework best practice with BP ID citations), quick reviews (question-level), pillar-scoped revie…
skills/core-skills/aws-well-architected-review/SKILL.md on GitHub (opens in a new tab) -
launch-with-aws
Migrates vibe-coded web applications to AWS. Handles the full workflow from analysis through migration to deployment, producing deployable AWS Blocks infrastructure code. Supports full-stack apps built with vibe-coding platforms (Lovable, Bolt.new, Replit) and frontend web applications and websites: React, Vue, Angular, Next.js, Nuxt, Astro, SvelteKit, Gatsby, Vite, Svelte, Solid, Docusaurus, and…
skills/core-skills/launch-with-aws/SKILL.md on GitHub (opens in a new tab) -
setting-up-cloudwatch-observability
Sets up CloudWatch Application Observability (also called Omni) for the first time. Covers creating an Omni Space or Domain; configuring and listing Omni access grants (who has access and at what level) and access profiles bounding what async alerts, integrations, or agents can do; instrumenting an application or AI agent with the ADOT SDK so traces reach CloudWatch Omni (Python/Node/Java/.NET on…
skills/core-skills/setting-up-cloudwatch-observability/SKILL.md on GitHub (opens in a new tab) -
signing-in-to-aws
Gets AWS credentials for CLI/SDK access via `aws login`. Activates when a developer needs to authenticate to AWS for local development, when an AWS operation fails due to missing or expired credentials, or when someone asks about setting up AWS access. Triggers: "set up AWS", "configure AWS", "aws login", "get credentials", "authenticate", "session expired", "token expired", "no credentials", "Ac…
skills/core-skills/signing-in-to-aws/SKILL.md on GitHub (opens in a new tab) -
analyzing-release-readiness
Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness, and potential rollback issues before merging. Trigger words include release readiness, analyze PR, analyze MR, review PR, risk analysis, pre-merge, safe to ship, ready to merge, ready to commit, any risks, before merging, validate changes,…
plugins/aws-agents-for-devsecops/skills/analyzing-release-readiness/SKILL.md on GitHub (opens in a new tab) -
chatting-with-aws-devops-agent
Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency questions, and quick diagnostics — anything that needs a 5-30 second answer rather than a 5-8 minute deep investigation. Trigger words include cost, optimize, review, architecture, topology, what runbooks, show…
plugins/aws-agents-for-devsecops/skills/chatting-with-aws-devops-agent/SKILL.md on GitHub (opens in a new tab) -
coordinating-multi-space-devops-agent
Coordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and synthesize, or compare findings across accounts. Use whenever the user has more than one AgentSpace configured, mentions multiple AWS accounts, or asks something like "check both prod and staging", "compa…
plugins/aws-agents-for-devsecops/skills/coordinating-multi-space-devops-agent/SKILL.md on GitHub (opens in a new tab) -
diff-scanning-with-aws-security-agent
Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.
plugins/aws-agents-for-devsecops/skills/diff-scanning-with-aws-security-agent/SKILL.md on GitHub (opens in a new tab) -
investigating-incidents-with-aws-devops-agent
Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug", "alarm fired", "service down". Polls and streams progress, then surfaces recommendations.
plugins/aws-agents-for-devsecops/skills/investigating-incidents-with-aws-devops-agent/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.