AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Aws

skill-fmind-dot-aws · by fmind

Operate AWS accounts, resources, and SSO profiles with aws and aws-sso-util.

↗ Website ↗ Repository
— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add skill-fmind-dot-aws

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-fmind-dot-aws)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● today

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Aws? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Amazon Web Services CLI

Use aws and aws-sso-util for AWS account, IAM, S3, ECS, and CloudWatch operations. [infra-as-code](../infra-as-code/SKILL.md) owns provisioned infrastructure, and [incident-response](../incident-response/SKILL.md) owns a live outage.

Workflow

  1. Resolve identity and profile context: inspect the active AWS profile, SSO session, and caller identity; never assume role or run commands under ambiguous profiles.

``bash aws sts get-caller-identity --profile --output json aws configure list-profiles ``

  1. Authenticate via SSO: when credentials expire, refresh the session using AWS IAM Identity Center (SSO); avoid long-lived access keys.

``bash aws sso login --profile # Or using aws-sso-util: aws-sso-util login --profile ``

  1. Pin every consequential call: pass --profile and --region explicitly so environment variables or shell defaults cannot redirect operations to the wrong account or region.
  2. Start read-only with bounded queries: use --query (JMESPath) and --max-items to constrain results; describe resources, IAM policies, and CloudWatch metrics before changing anything.

``bash aws s3 ls --profile aws ecs list-clusters --profile --region --max-items 20 --output json ``

  1. Plan mutations and confirm: state the target ARN, expected before and after states, and rollback steps; resource creation, security group changes, policy updates, and deletions require user authorization; reuse existing authority rather than asking again.
  2. Apply and verify: execute the mutation, then re-read the resource status to confirm the state change.

Gotchas

  • Expired SSO tokens: SSO tokens expire after their configured duration; refresh via aws sso login rather than falling back to static API keys.
  • --query client-side evaluation: JMESPath queries in --query run client-side after downloading the page; for large resources, pair with --max-items; --page-size only changes each request size to prevent timeout.
  • Failures are findings: report authorization (AccessDeniedException) or missing role errors directly; do not attempt permission escalation or modify IAM policies without authorization.

Documentation

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

  • Author: fmind
  • Source: fmind/dot
  • License: MIT
  • Homepage: https://fmind.dev

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Cloud & Infrastructure