# Send AWS | Amazon Web Services to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "aws", "name": "AWS | Amazon Web Services", "source": "tencent", "type": "skill", "category": "AI 智能", "sourceUrl": "https://clawhub.ai/ivangdavila/aws", "canonicalUrl": "https://clawhub.ai/ivangdavila/aws", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/aws", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=aws", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "costs.md", "memory-template.md", "security.md", "services.md", "setup.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "aws", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-29T03:07:18.243Z", "expiresAt": "2026-05-06T03:07:18.243Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=aws", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=aws", "contentDisposition": "attachment; filename=\"aws-1.0.2.zip\"", "redirectLocation": null, "bodySnippet": null, "slug": "aws" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/aws" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/aws", "downloadUrl": "https://openagent3.xyz/downloads/aws", "agentUrl": "https://openagent3.xyz/skills/aws/agent", "manifestUrl": "https://openagent3.xyz/skills/aws/agent.json", "briefUrl": "https://openagent3.xyz/skills/aws/agent.md" } } ``` ## Documentation ### Setup On first use, read setup.md for integration options. The skill works immediately — setup is optional for personalization. ### When to Use User needs AWS infrastructure guidance. Agent handles architecture decisions, service selection, cost optimization, security hardening, and deployment patterns. ### Architecture Memory lives in ~/aws/. See memory-template.md for structure. ~/aws/ ├── memory.md # Account context + preferences ├── resources.md # Active infrastructure inventory └── costs.md # Cost tracking + alerts ### Quick Reference TopicFileSetup processsetup.mdMemory templatememory-template.mdService patternsservices.mdCost optimizationcosts.mdSecurity hardeningsecurity.md ### 1. Verify Account Context First Before any operation, confirm: Region (default: us-east-1, but ask) Account type (personal/startup/enterprise) Existing infrastructure (VPC, subnets, security groups) aws sts get-caller-identity aws ec2 describe-vpcs --query 'Vpcs[].{ID:VpcId,CIDR:CidrBlock,Default:IsDefault}' ### 2. Cost-First Architecture Every recommendation includes cost impact: StageRecommended StackMonthly CostMVP (<1k users)Single EC2 + RDS~$50Growth (1-10k)ALB + ASG + RDS Multi-AZ~$200Scale (10k+)ECS/EKS + Aurora + ElastiCache~$500+ Default to smallest viable instance. Scaling up is easy; scaling down wastes money. ### 3. Security by Default Every resource includes: Principle of least privilege IAM Encryption at rest (KMS default key minimum) VPC isolation (no public subnets for databases) Security groups with explicit deny-all inbound ### 4. Infrastructure as Code Generate Terraform or CloudFormation for reproducibility: # Prefer Terraform for multi-cloud portability terraform init && terraform plan Never rely on console-only changes. ### 5. Tagging Strategy Every resource gets tagged for cost allocation: --tags Key=Environment,Value=prod Key=Project,Value=myapp Key=Owner,Value=team ### 6. Monitoring from Day 1 Deploy CloudWatch alarms with infrastructure: Billing alerts (before you get surprised) CPU/Memory thresholds Error rate spikes ### Cost Traps NAT Gateway data processing ($0.045/GB): VPC endpoints are free for S3/DynamoDB. A busy app can burn $500/month on NAT alone. aws ec2 create-vpc-endpoint --vpc-id vpc-xxx \\ --service-name com.amazonaws.us-east-1.s3 --route-table-ids rtb-xxx EBS snapshots accumulate forever: Automated backups create snapshots that never delete. Set lifecycle policies. aws ec2 describe-snapshots --owner-ids self \\ --query 'Snapshots[?StartTime<=\`2024-01-01\`].[SnapshotId,StartTime,VolumeSize]' CloudWatch Logs default retention is forever: aws logs put-retention-policy --log-group-name /aws/lambda/fn --retention-in-days 14 Idle load balancers cost $16/month minimum: ALBs charge even with zero traffic. Delete unused ones. Data transfer between AZs costs $0.01/GB each way: Chatty microservices across AZs add up fast. Co-locate when possible. ### Security Traps S3 bucket policies override ACLs: Console shows ACL as "private" but a bucket policy can still expose everything. aws s3api get-bucket-policy --bucket my-bucket 2>/dev/null || echo "No policy" aws s3api get-public-access-block --bucket my-bucket Default VPC security groups allow all outbound: Attackers exfiltrate through outbound. Restrict it. IAM users with console access + programmatic access: Credentials in code get leaked. Use roles + temporary credentials. RDS publicly accessible defaults to Yes in console: Always verify: aws rds describe-db-instances --query 'DBInstances[].{ID:DBInstanceIdentifier,Public:PubliclyAccessible}' ### Performance Patterns Lambda cold starts: Use provisioned concurrency for latency-sensitive functions Keep packages small (<50MB unzipped) Initialize SDK clients outside handler RDS connection limits: InstanceMax Connectionsdb.t3.micro66db.t3.small150db.t3.medium300 Use RDS Proxy for Lambda to avoid connection exhaustion. EBS volume types: TypeUse CaseIOPSgp3Default (consistent)3,000 baseio2Databases (guaranteed)Up to 64,000st1Big data (throughput)500 MiB/s ### Service Selection NeedServiceWhyStatic siteS3 + CloudFrontPennies/month, global CDNAPI backendLambda + API GatewayZero idle costContainer appECS FargateNo cluster managementDatabaseRDS PostgreSQLManaged, Multi-AZ readyCacheElastiCache RedisSession/cache, < DynamoDB latencyQueueSQSSimpler than SNS for most casesSearchOpenSearchElasticsearch managed ### CLI Essentials # Configure credentials aws configure --profile myproject # Always specify profile export AWS_PROFILE=myproject # Check current identity aws sts get-caller-identity # List all regions aws ec2 describe-regions --query 'Regions[].RegionName' # Estimate monthly cost aws ce get-cost-forecast --time-period Start=$(date +%Y-%m-01),End=$(date -v+1m +%Y-%m-01) \\ --metric UNBLENDED_COST --granularity MONTHLY ### Security & Privacy Credentials: This skill uses the AWS CLI, which reads credentials from ~/.aws/credentials or environment variables. The skill never stores, logs, or transmits AWS credentials. Local storage: Preferences and context stored in ~/aws/ — no data leaves your machine. CLI commands: All commands shown are read-only by default. Destructive operations (delete, terminate) require explicit user confirmation. ### Related Skills Install with clawhub install if user confirms: infrastructure — architecture decisions cloud — multi-cloud patterns docker — container basics backend — API design ### Feedback If useful: clawhub star aws Stay updated: clawhub sync ## Trust - Source: tencent - Verification: Indexed source record - Publisher: ivangdavila - Version: 1.0.2 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-04-29T03:07:18.243Z - Expires at: 2026-05-06T03:07:18.243Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/aws) - [Send to Agent page](https://openagent3.xyz/skills/aws/agent) - [JSON manifest](https://openagent3.xyz/skills/aws/agent.json) - [Markdown brief](https://openagent3.xyz/skills/aws/agent.md) - [Download page](https://openagent3.xyz/downloads/aws)