Infrastructure Aws

AWS Infrastructure

Authentication

IMPORTANT: Credentials are fetched automatically from the credential resolver. Do NOT check for AWS_ACCESS_KEY_ID or AWS_SECRET_ACCESS_KEY in environment variables — they won't be visible to you. Just run the scripts directly; authentication is handled transparently.

Configuration you CAN check (non-secret):

• CONFIGURED_INTEGRATIONS — JSON list, check if aws is present

---

MANDATORY: Logs/Metrics-First Investigation

Start with CloudWatch logs or metrics, then drill into resources.

CLOUDWATCH LOGS/METRICS → IDENTIFY RESOURCE → DESCRIBE RESOURCE → CHECK ALARMS

Available Scripts

All scripts are in .claude/skills/infrastructure-aws/scripts/

getcloudwatchlogs.py - CloudWatch Log Queries (START HERE for log investigation)

python .claude/skills/infrastructure-aws/scripts/get_cloudwatch_logs.py --log-group /aws/lambda/my-function --filter "ERROR" --hours 1
python .claude/skills/infrastructure-aws/scripts/get_cloudwatch_logs.py --log-group /ecs/my-service --filter "Exception" --hours 6 --limit 50

getcloudwatchmetrics.py - CloudWatch Metrics

python .claude/skills/infrastructure-aws/scripts/get_cloudwatch_metrics.py --namespace AWS/EC2 --metric CPUUtilization --dimension InstanceId=i-1234567890abcdef0 --hours 1
python .claude/skills/infrastructure-aws/scripts/get_cloudwatch_metrics.py --namespace AWS/ECS --metric CPUUtilization --dimension ClusterName=prod,ServiceName=api --hours 6 --period 300

listcloudwatchalarms.py - CloudWatch Alarms

python .claude/skills/infrastructure-aws/scripts/list_cloudwatch_alarms.py
python .claude/skills/infrastructure-aws/scripts/list_cloudwatch_alarms.py --state ALARM

listec2instances.py - List EC2 Instances

python .claude/skills/infrastructure-aws/scripts/list_ec2_instances.py
python .claude/skills/infrastructure-aws/scripts/list_ec2_instances.py --filters "Name=tag:env,Values=production"
python .claude/skills/infrastructure-aws/scripts/list_ec2_instances.py --filters "Name=instance-state-name,Values=running"

describeec2instance.py - Detailed EC2 Instance Info

python .claude/skills/infrastructure-aws/scripts/describe_ec2_instance.py --instance-id i-1234567890abcdef0

listecsservices.py - List ECS Services

python .claude/skills/infrastructure-aws/scripts/list_ecs_services.py --cluster prod-api
python .claude/skills/infrastructure-aws/scripts/list_ecs_services.py --cluster prod-api --json

describeecsservice.py - ECS Service Details

python .claude/skills/infrastructure-aws/scripts/describe_ecs_service.py --cluster prod-api --service api-handler

listlambdafunctions.py - List Lambda Functions

python .claude/skills/infrastructure-aws/scripts/list_lambda_functions.py
python .claude/skills/infrastructure-aws/scripts/list_lambda_functions.py --prefix api-

getlambdalogs.py - Lambda Invocation Logs

python .claude/skills/infrastructure-aws/scripts/get_lambda_logs.py --function-name api-handler --hours 1
python .claude/skills/infrastructure-aws/scripts/get_lambda_logs.py --function-name api-handler --filter "ERROR" --limit 20

---

Investigation Workflows

EC2 Instance Issue

1. list_ec2_instances.py --filters "Name=instance-state-name,Values=running"
2. describe_ec2_instance.py --instance-id 
3. get_cloudwatch_metrics.py --namespace AWS/EC2 --metric CPUUtilization --dimension InstanceId=
4. list_cloudwatch_alarms.py --state ALARM

ECS Task Failure

1. list_ecs_services.py --cluster 
2. describe_ecs_service.py --cluster  --service 
3. get_cloudwatch_logs.py --log-group /ecs/ --filter "ERROR" --hours 1
4. get_cloudwatch_metrics.py --namespace AWS/ECS --metric CPUUtilization --dimension ClusterName=,ServiceName=

Lambda Error Investigation

1. list_lambda_functions.py
2. get_lambda_logs.py --function-name  --filter "ERROR" --hours 1
3. get_cloudwatch_metrics.py --namespace AWS/Lambda --metric Errors --dimension FunctionName=
4. get_cloudwatch_metrics.py --namespace AWS/Lambda --metric Duration --dimension FunctionName=

Cost / Resource Audit

1. list_ec2_instances.py
2. list_ecs_services.py --cluster 
3. list_lambda_functions.py
4. get_cloudwatch_metrics.py (check utilization of resources)

Output Format

When reporting findings, use this structure:

## AWS Analysis

**Service**: 
**Region**: 
**Resource**: 

### Findings
- [Finding with evidence]

### Root Cause Hypothesis
[Based on metrics and logs]

### Recommended Action
[Specific remediation step]

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: swapnildahiphale
• Source: swapnildahiphale/OpenSRE
• License: Apache-2.0
• Homepage: https://opensre.in

Install and usage instructions live in the source repository linked above.