# Aws Well Architected Review

> WHAT — AWS Well-Architected Framework review (6 pillars) — operational excellence, security, reliability, performance, cost, sustainability + WAR process. Checklist for workload evaluation on AWS; complementary to official AWS MCP for live account data.

- **Type:** Skill
- **Install:** `agentstack add skill-ulises-jeremias-agent-toolkit-aws-well-architected-review`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [ulises-jeremias](https://agentstack.voostack.com/s/ulises-jeremias)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [ulises-jeremias](https://github.com/ulises-jeremias)
- **Source:** https://github.com/ulises-jeremias/agent-toolkit/tree/main/plugins/agent-toolkit-complete/.github/skills/aws-well-architected-review
- **Website:** https://ulises-jeremias.github.io/agent-toolkit-archive/

## Install

```sh
agentstack add skill-ulises-jeremias-agent-toolkit-aws-well-architected-review
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# AWS Well-Architected Review (WHAT)

**Sources (2026-08-12):** Framework `https://docs.aws.amazon.com/wellarchitected/latest/framework/the-pillars-of-the-framework.html` + `https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html` + `https://aws.amazon.com/architecture/well-architected/`; WAR Tool `https://docs.aws.amazon.com/wellarchitected/latest/userguide/getting-started.html`; MCP `awslabs/mcp` https://github.com/awslabs/mcp + `https://github.com/aws/mcp-proxy-for-aws` GA `https://aws.amazon.com/blogs/aws/the-aws-mcp-server-is-now-generally-available/`; servers `awslabs.core-mcp-server`, `awslabs.well-architected-security-mcp-server 0.1.3`, `awslabs.ecs-mcp-server 0.1.17` `uvx awslabs.*@latest` `AWS_PROFILE`/`AWS_REGION`.

> **Provider hierarchy:** `official MCP` (`awslabs/mcp` family, `mcp-proxy-for-aws` GA) > `custom` prompts for **account-aware** ops (live context, auth via `AWS_PROFILE`/`AWS_REGION`); **prompts** (this skill checklist) remain fallback for offline/low-privilege/CI. See `docs/cloud/research-384-candidates.md`.

## When to use

- Designing or reviewing workload on AWS against 6 pillars.
- Running Well-Architected Review (WAR) without console Tool access.

## Instructions

1. **Run checklist** per pillar: operational excellence (runbooks, observability), security (IAM, encryption, least privilege), reliability (multi-AZ, backup, retry), performance (right-sizing, caching), cost (graviton, S3 lifecycle), sustainability (right-sizing, serverless).
2. **Map** to `cloud-design-patterns` where relevant (e.g., reliability → `Circuit Breaker`).
3. **If live account:** delegate to `awslabs/mcp` (`mcp-proxy-for-aws` or `awslabs.core-mcp-server` `uvx`) for context; else **do NOT** paste `${AWS_*}` secrets — use placeholders `${AWS_PROFILE}`, `${AWS_REGION}`, `${AWS_ACCOUNT_ID}`.
4. Record findings as `High/Medium/Low` risk per pillar and link to lenses/hands-on labs.

## Security

- Must not exfiltrate credentials; use `${AWS_*}` placeholders; mark `aws-well-architected-review` as optional (no vendor lock).

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [ulises-jeremias](https://github.com/ulises-jeremias)
- **Source:** [ulises-jeremias/agent-toolkit](https://github.com/ulises-jeremias/agent-toolkit)
- **License:** MIT
- **Homepage:** https://ulises-jeremias.github.io/agent-toolkit-archive/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-ulises-jeremias-agent-toolkit-aws-well-architected-review
- Seller: https://agentstack.voostack.com/s/ulises-jeremias
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.