skills.rest
richardnroman
richardnromanCOMMUNITY
Explore all skills by this author →
GitHub

aws-networking

Routes AWS networking requests to the correct service-specific skill for implementation.

Updated Jul 21, 2026
Search Tags:#aws#routing#networking#waf#cloudfront#transit gateway#ddos protection
One-click install
npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill aws-networking-richardnroman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-networking
Source: https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform/tree/main/.agents/skills/aws-networking
Command: npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill aws-networking-richardnroman

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? AWS networking spans many overlapping services, and choosing the wrong one leads to misconfigured connectivity or security gaps. This Skill triages networking requests and routes them to the correct service-specific skill across Route 53, CloudFront, Transit Gateway, Direct Connect, Site-to-Site VPN, Network Firewall, WAF, and Shield Advanced. ## Core Features & Use Cases - Skill Routing Table: Matches user requests by meaning to one of eight AWS networking service skills, with disambiguation rules for overlapping requests. - Cross-Service Concept Tables: Clarifies which layer owns filtering, logging, and traffic shifting when multiple services could apply. - Security Guardrails: Raises encryption-in-transit, DDoS protection, least-privilege IAM, and logging requirements that the target skill must implement. - Use Case: A user asks to inspect east-west traffic between VPCs joined by a Transit Gateway. The Skill routes first to the transitgateway skill for connectivity, then to the networkfirewall skill for stateful inspection, in dependency order. ## Quick Start Ask the agent to set up an encrypted Site-to-Site VPN tunnel with BGP routing and let it route the request to the correct service skill.

Frequently Asked Questions about aws-networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between AWS WAF, Network Firewall, and Shield Advanced?▼

Choose by layer: WAF filters L7 HTTP requests on CloudFront, ALB, API Gateway, or AppSync; Network Firewall performs stateful L3-L7 inspection with FQDN and Suricata rules; Shield Advanced protects internet-facing resources from L3/L4 DDoS attacks.

How do I connect multiple VPCs and on-premises networks in AWS?▼

Use Transit Gateway as a hub when connecting more than two VPCs or on-premises networks, with support for segmentation, cross-account connectivity, and centralized egress. For a single dedicated private link, use Direct Connect; for quick encrypted tunnels over the internet, use Site-to-Site VPN.

Does this skill configure VPC subnets, route tables, or load balancers?▼

No. VPC subnets, route tables, security groups, load balancers, VPC endpoints, PrivateLink, and API Gateway are explicitly out of scope. The skill tells the user those services are not available rather than routing to the closest listed skill.

Direct Connect vs Site-to-Site VPN for hybrid connectivity?▼

Direct Connect provides a dedicated private link with consistent latency, high throughput, and optional MACsec encryption for production hybrid workloads. Site-to-Site VPN offers encrypted IPsec tunnels over the internet with quick setup, and works as a backup path for Direct Connect.

Why does the skill route to multiple skills for one request?▼

Requests spanning layers require dependency-ordered routing: connectivity skills first, then inspection skills. Internet-facing CloudFront requests also route to Shield Advanced for DDoS protection and WAF for L7 filtering if not already addressed.

What security controls does the skill enforce when routing?▼

It raises encryption in transit (MACsec, IPsec, TLS), least-privilege IAM, WAF rate-based rules, confused-deputy conditions in resource policies, and service logging with encrypted destinations. The target service skill implements each control.

Related Skills

Explore More Software Engineering Skills→
sitharaj88sitharaj88
1

gcp-vpc

Generate Google Cloud VPC architectures with Terraform configurations.

Community
Advanced
necatiarslannecatiarslan
1

awsclaw-cloudwatch

Aggregate CloudWatch log groups and events to surface errors across AWS services.

Community
Intermediate
githubgithub
38.5k

aws-cloudwatch-investigation

Provides CloudWatch Logs Insights queries and metric patterns for structured incident triage.

Official
Intermediate
aws-samplesaws-samples
12

security-review

Audit AWS infrastructure code for security misconfigurations and remediation guidance.

Official
Intermediate