Updated today
by aws
tools-for-devops-agent
Open-source tools for AWS DevOps Agent - extend DevOps Agent with ready-to-use skills, custom agents, and other tools, for incident response, root cause analysis, and operational troubleshooting
107 GitHub stars (107)
+18 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | +1 |
| Oct 3 | +1 |
| Oct 4 | +1 |
| Oct 5 | +2 |
| Oct 6 | +1 |
| Oct 7 | +2 |
| Oct 8 | +3 |
| Oct 9 | +2 |
| Oct 10 | +1 |
| Oct 11 | 0 |
| Oct 12 | +1 |
| Oct 13 | 0 |
| Oct 14 | +1 |
| Oct 15 | +1 |
| Oct 16 | +1 |
- 27 skills (27 skills found in its SKILL.md files)
- 76 forks (76 forks)
- Today last update (Last updated today)
Install
Skills CLI
npx skills add aws/tools-for-devops-agent
Asks which skills and agents to install. Just one: npx skills add aws/tools-for-devops-agent --skill agentcore-observability-setup — add -g for every project.
Claude Code
git clone https://github.com/aws/tools-for-devops-agentcp -r "tools-for-devops-agent/skills/agentcore-observability-setup" ~/.claude/skills/
Copies the agentcore-observability-setup skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add aws/tools-for-devops-agent
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
agentcore-observability-setup
Validates and bootstraps Amazon Bedrock AgentCore observability so customers can trace agent reasoning, detect silent failures, and measure performance before an outage. Use this skill when a user asks to check, validate, audit, verify, fix, or set up AgentCore observability, tracing, metrics, or logging - for example "is AgentCore observability configured correctly", "why can't I see traces for…
skills/agentcore-observability-setup/SKILL.md on GitHub (opens in a new tab) -
agentcore-ops-review
Comprehensive operational review procedures for Amazon Bedrock AgentCore resources aligned with the AWS Well-Architected Framework. Covers four check areas — Runtime Resilience, Gateway Health, Memory & Knowledge Effectiveness, and Resource Utilization & Operational Hygiene — plus runtime observability signals from CloudWatch. Use this skill when a user asks to review, audit, or assess Amazon Bed…
skills/agentcore-ops-review/SKILL.md on GitHub (opens in a new tab) -
aiml-access-diagnostics
Use this skill when diagnosing IAM and access failures for Bedrock and SageMaker. It traces the authorization chain — caller identity, iam:PassRole, trust policy, role permissions, resource policies, SCPs — to name the denying hop and propose a scoped policy. Read-only. Use when a Bedrock or SageMaker call fails on permissions: InvokeModel or Converse AccessDeniedException, CreateTrainingJob or C…
skills/aiml-access-diagnostics/SKILL.md on GitHub (opens in a new tab) -
analytics-opensearch-expertise
Amazon OpenSearch Service domain health assessment. Performs read-only, API-driven checks against a customer's OpenSearch domain(s) covering cluster health, node/shard configuration, performance metrics, security posture, and cost optimization signals. Activate this skill for requests about OpenSearch or Elasticsearch domain health, cluster review, domain assessment, performance, security posture…
skills/analytics-opensearch-expertise/SKILL.md on GitHub (opens in a new tab) -
aws-backup-coverage-review
AWS Backup coverage and data protection posture review. Determines which backup-eligible resources are protected by AWS Backup and which are not, across all enabled Regions of an account, then evaluates backup plan frequency and retention, cross-Region and cross-account copies, vault encryption and Vault Lock, and per-Region resource type opt-in. Uses read-only control-plane API calls and produce…
skills/aws-backup-coverage-review/SKILL.md on GitHub (opens in a new tab) -
aws-eks-operations-review
Use this skill when someone wants an Amazon EKS cluster graded against best practices. Use it when they ask to review, assess, audit, or grade a cluster; ask for an operations review, security review, operational-readiness or pre-upgrade check, inventory, or CWR; ask whether a cluster is production-ready or safe to upgrade; ask what risks, gaps, or misconfigurations it carries; or describe Kubern…
skills/aws-eks-operations-review/SKILL.md on GitHub (opens in a new tab) -
aws-health-events
ALWAYS use this skill in the beginning of any incident investigation, root cause analysis, or operational troubleshooting. This skill retrieves and analyzes AWS Health events (service issues, scheduled changes, and account notifications) to identify AWS-side events that may explain or correlate with observed operational issues. Activate this skill when investigating an issue and you observe servi…
skills/aws-health-events/SKILL.md on GitHub (opens in a new tab) -
aws-routing
Analyze and troubleshoot AWS routing and BGP path selection - how AWS chooses a network path, why traffic takes an unexpected route, and how to steer it. Use for AWS Cloud WAN route evaluation and CNE path selection; Direct Connect Gateway (DXGW) path selection and local vs remote region preference; Transit Gateway route tables, ECMP, and peering; VPC route tables and longest-prefix-match; BGP tr…
skills/aws-routing/SKILL.md on GitHub (opens in a new tab) -
aws-vpc-dns-investigation
Use this skill when a name is not resolving as expected inside a VPC, or before applying a DNS control-plane change. Activate on symptoms such as NXDOMAIN or SERVFAIL from an EC2 instance, a hostname resolving to a public address when a private endpoint was expected, an AWS service endpoint that stopped resolving after a VPC endpoint or Route 53 change, an application reaching the wrong IP, resol…
skills/aws-vpc-dns-investigation/SKILL.md on GitHub (opens in a new tab) -
bedrock-adoption-readiness
Amazon Bedrock production readiness assessment covering IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability across Standard Bedrock and Mantle surfaces. Use this skill when a user asks to review Bedrock readiness, assess Bedrock security posture, evaluate quota headroom, check ZDR configuration, validate Bedrock operational setup, or prepare for Bedroc…
skills/bedrock-adoption-readiness/SKILL.md on GitHub (opens in a new tab) -
bedrock-operation-review
Comprehensive Amazon Bedrock review aligned with the AWS Well-Architected Framework and Bedrock best practices. Use this skill when a user asks to review, audit, or assess Amazon Bedrock workloads for best-practices compliance, security posture, performance, cost optimization, service quotas, or resilience. Triggers on requests like "Bedrock review", "Bedrock best practices audit", "GenAI operati…
skills/bedrock-operation-review/SKILL.md on GitHub (opens in a new tab) -
crm-production-investigation-guidelines
Guidelines for investigating production incidents in the CRM application. Use when triaging any alert or incident involving the CRM REST API, SQS queues, Lambda functions, or Aurora DSQL database in this AWS account. Ensures thorough root cause analysis using AWS-native observability tools.
skills/crm-production-investigation-guidelines/SKILL.md on GitHub (opens in a new tab) -
database-migration-service-expertise
AWS Database Migration Service (DMS) operational review and troubleshooting skill. Conducts best practices validation, health assessments, performance diagnostics, cost optimization reviews, and migration cutover guidance. Triggers on requests like "DMS review", "DMS health check", "DMS troubleshooting", "migration assessment", "DMS best practices audit", "DMS cost optimization", "replication ins…
skills/database-migration-service-expertise/SKILL.md on GitHub (opens in a new tab) -
database-rds-devops
Database-level data-plane diagnostics for Aurora MySQL and Aurora PostgreSQL. Executes predefined read-only health check queries via RDS Data API to analyze buffer pool, connections, locks, replication, storage, performance, and index efficiency. Requires the rds-aidba MCP server for database-internal access beyond what CloudWatch and RDS APIs provide.
skills/database-rds-devops/SKILL.md on GitHub (opens in a new tab) -
ecs-operation-review
Performs a comprehensive Amazon ECS operations review across the 6 review pillars (Resiliency & HA, Observability, Security, Operations, Performance, Additional Analysis) using read-only AWS APIs, with a 7-day CloudWatch metrics baseline, recommended alarm thresholds for IDR onboarding, per-pillar PASS/FAIL/N/A scorecards, and a prioritized, remediation-linked report artifact. Triggers on: "ECS o…
skills/ecs-operation-review/SKILL.md on GitHub (opens in a new tab) -
eks-upgrade-readiness
Use this skill when a user asks to assess, plan, or validate an Amazon EKS cluster upgrade. Activate on requests mentioning "EKS upgrade", "Kubernetes version upgrade", "upgrade readiness", "upgrade plan", "pre-upgrade check", "version skew", "deprecated API", "addon compatibility", "node group upgrade", "control plane upgrade", "EKS end of support", "EKS extended support", "Karpenter drift", "ku…
skills/eks-upgrade-readiness/SKILL.md on GitHub (opens in a new tab) -
enrich-with-aws-security-agent
Automatically load this skill when investigating application outages, service degradation, or errors that could have security-related root causes — including unexplained downtime, authentication or authorization failures, injection attacks, data exposure, or suspicious application behavior. Query AWS Security Agent CloudWatch logs to retrieve detailed code review findings with actionable, low-lev…
skills/enrich-with-aws-security-agent/SKILL.md on GitHub (opens in a new tab) -
investigation-cost-guardrail
Cost guardrail for AWS DevOps Agent that covers ALL AWS services and native agent tools. Before the agent makes any paid API call, this skill estimates cost, enforces budgets per investigation, detects expensive operations across all services (Athena queries, S3 scans, DynamoDB scans, SageMaker inference, PromQL, etc.), enforces time window requirements, monitors cumulative call volume, and cance…
skills/investigation-cost-guardrail/SKILL.md on GitHub (opens in a new tab) -
msk-operations
Amazon MSK Provisioned operations, troubleshooting, and health assessment for Standard and Express brokers. Use whenever the user mentions Amazon MSK, MSK Provisioned, MSK Standard/Express brokers, Apache Kafka on AWS, `kafka.*` / `express.*` instance types, or the `AWS/Kafka` CloudWatch namespace. Covers MSK performance issues (high CPU, produce/fetch latency, TrafficShaping), consumer lag, stor…
skills/msk-operations/SKILL.md on GitHub (opens in a new tab) -
rds-operation-review
Comprehensive Amazon RDS and Aurora operational review aligned with the AWS Well-Architected Framework and RDS/Aurora best practices. Use this skill when a user asks to review, audit, or assess RDS instances or Aurora clusters for best practices compliance, security posture, reliability, performance, cost optimization, backups, encryption, or operational readiness. Triggers on requests like "RDS…
skills/rds-operation-review/SKILL.md on GitHub (opens in a new tab) -
redshift-support-specialist
Amazon Redshift domain expertise for query optimization, operational reviews, and cost optimization on provisioned clusters and Serverless workgroups. Use when a user asks about Redshift query tuning, slow queries, disk spill, distribution/sort key issues, a Redshift health check or operational review, or Redshift cost or RPU sizing. Requires the awslabs.redshift-mcp-server MCP server to be conne…
skills/redshift-support-specialist/SKILL.md on GitHub (opens in a new tab) -
service-quota-check
Use this skill during any incident investigation, capacity planning, or operational troubleshooting when the issue may be caused by hitting AWS service limits. Activate when you observe throttling errors (ThrottlingException, TooManyRequestsException, LimitExceededException), resource creation failures, capacity-related alarms, or when a recommendation involves provisioning new AWS resources.
skills/service-quota-check/SKILL.md on GitHub (opens in a new tab) -
skip-scheduled-maintenance
Skip low-priority incidents during a scheduled maintenance window. Use this skill to automatically filter MEDIUM and LOW severity alarms that fire during planned maintenance, avoiding unnecessary investigations for expected disruptions.
skills/skip-scheduled-maintenance/SKILL.md on GitHub (opens in a new tab) -
storage-fsx-windows-sla-optimizer
Read-only SLA-readiness, availability, and cost review of Amazon FSx for Windows File Server. Assesses one or many file systems across seven dimensions — deployment type (Single-AZ vs Multi-AZ), Active Directory health, throughput sizing, storage headroom, backups, maintenance window, and CloudWatch alarms — and returns a rated report with prioritized findings and remediation. Also flags over-pro…
skills/storage-fsx-windows-sla-optimizer/SKILL.md on GitHub (opens in a new tab) -
storage-s3-resiliency-expertise
S3 resiliency, security, and data protection review. Assesses one or many S3 buckets across nine dimensions — versioning, replication, object lock, encryption, block public access, bucket policy, ownership controls, server access logging, and static website hosting — using read-only control-plane API calls, then produces a rated report with prioritized findings and remediation guidance. Single-bu…
skills/storage-s3-resiliency-expertise/SKILL.md on GitHub (opens in a new tab) -
support-cases
ALWAYS use this skill in the beginning of any incident investigation, root cause analysis, or operational troubleshooting. This skill retrieves and analyzes AWS Support cases (open and resolved) to find historical incidents with similar symptoms, error patterns, or affected services. Activate this skill when investigating an issue and you observe service degradation, elevated error rates, latency…
skills/support-cases/SKILL.md on GitHub (opens in a new tab) -
wiz-security-context
Automatically load this skill when investigating an operational anomaly on a cloud resource - CPU or memory spikes, latency, elevated error rates, unexpected network traffic, crashes, or cost spikes - to determine whether it is a purely operational issue or a security incident, using the affected resource's security context (vulnerabilities, misconfigurations, exposed secrets, data findings, acti…
skills/wiz-security-context/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.