aws-skills

Implements AWS infrastructure with CDK v2, Terraform, IAM security, and cost optimization patterns.

Updated Aug 19, 2026
One-click install
npx skills add https://github.com/nperepichka/Antigravity --skill aws-skills-nperepichka
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-skills
Source: https://github.com/nperepichka/Antigravity/tree/main/config/skills/aws-skills
Command: npx skills add https://github.com/nperepichka/Antigravity --skill aws-skills-nperepichka

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Designing secure, cost-efficient AWS infrastructure requires deep knowledge of CDK patterns, IAM least-privilege policies, VPC networking, and Well-Architected principles, which is error-prone when done manually. ## Core Features & Use Cases - CDK v2 Infrastructure Patterns: Provides production-grade TypeScript examples for modular stacks, VPCs with endpoints, Lambda bundling, and ECS Fargate services. - Security & IAM Hardening: Enforces least-privilege IAM, S3 bucket policies with TLS enforcement, and GitHub Actions OIDC authentication without static credentials. - Cost Optimization: Applies Graviton ARM64 architectures, S3 Intelligent-Tiering, VPC Gateway Endpoints, and log retention controls to reduce cloud spend. - Use Case: When building a new microservice on AWS, use this Skill to scaffold a multi-stack CDK app with a secure VPC, Fargate service, and OIDC-based CI/CD deployment role. ## Quick Start Use the aws-skills skill to create a CDK stack for an ECS Fargate service behind an application load balancer in a private VPC.

Frequently Asked Questions about aws-skills

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure an AWS CDK app with multiple stacks?▼

Create separate stack classes such as NetworkStack and ComputeStack, instantiate them in bin/app.ts, and pass resources like the VPC between stacks via props. Use stack.addDependency() to enforce deployment ordering.

How to deploy to AWS from GitHub Actions without access keys?▼

Configure an IAM OpenIdConnectProvider for token.actions.githubusercontent.com and create a role assumed via sts:AssumeRoleWithWebIdentity. Restrict the role with conditions on the repository and branch claims.

Does AWS CDK support ARM64 Graviton for Lambda and ECS?▼

Yes, set architecture: Architecture.ARM_64 on Lambda functions and cpuArchitecture: CpuArchitecture.ARM64 on Fargate task definitions. Graviton provides up to 20% cost reduction with better performance.

How do I reduce NAT Gateway costs in AWS VPCs?▼

Set natGateways: 1 for non-production environments and add free Gateway VPC Endpoints for S3 and DynamoDB to bypass NAT data processing fees. Each unnecessary NAT Gateway costs roughly $32 per month.

Why should I avoid hardcoding resource names in CDK?▼

Hardcoded physical names prevent parallel branch deployments, cause naming conflicts across environments, and create drift. Let CloudFormation generate unique names automatically for multi-environment isolation.