AWS CLI Skill

This skill enables comprehensive AWS cloud infrastructure management using the AWS CLI tool.

Environment Default Region: us-east-1 AWS CLI: Pre-configured with full account permissions Account: SimplexAI AWS account (ID: 830101142436) Safety Protocol Dangerous Operations Requiring Confirmation

Before executing any of the following operations, explicitly confirm with the user:

Delete operations: delete-, remove-, terminate-, deregister- Destructive modifications: modify- on production resources, update- that changes critical settings State changes: stop-, reboot- on production instances Security changes: IAM policy modifications, security group rule changes Cost implications: Creating expensive resources (large EC2 instances, NAT gateways, etc.) Confirmation Format ⚠️ 危险操作确认

操作: [具体操作描述] 影响: [潜在影响说明] 资源: [受影响的资源标识]

是否继续执行？

Common Operations Reference Compute Services EC2

List instances

aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,State.Name,InstanceType,Tags[?Key==Name].Value|[0]]' --output table

Instance state management

aws ec2 start-instances --instance-ids aws ec2 stop-instances --instance-ids aws ec2 reboot-instances --instance-ids

ECS

List clusters and services

aws ecs list-clusters aws ecs list-services --cluster aws ecs describe-services --cluster --services

View running tasks

aws ecs list-tasks --cluster --service-name aws ecs describe-tasks --cluster --tasks

Force new deployment

aws ecs update-service --cluster --service --force-new-deployment

EKS

List clusters

aws eks list-clusters aws eks describe-cluster --name

Update kubeconfig

aws eks update-kubeconfig --name --region us-east-1

Lambda

List functions

aws lambda list-functions --query 'Functions[].[FunctionName,Runtime,LastModified]' --output table

Invoke function

aws lambda invoke --function-name --payload '{}' response.json

View logs

aws logs tail /aws/lambda/ --follow

Storage Services S3

List buckets and objects

aws s3 ls aws s3 ls s3:/// --recursive --human-readable

Copy and sync

aws s3 cp s3:/// aws s3 sync s3:///

Bucket info

aws s3api get-bucket-location --bucket aws s3api get-bucket-versioning --bucket

ECR

List repositories

aws ecr describe-repositories --query 'repositories[].[repositoryName,repositoryUri]' --output table

List images in repository

aws ecr describe-images --repository-name simplexai/ --query 'imageDetails | sort_by(@, &imagePushedAt) | [-10:].[imageTags[0],imagePushedAt]' --output table

Get login token

aws ecr get-login-password --region us-east-1

Database Services RDS

List instances

aws rds describe-db-instances --query 'DBInstances[].[DBInstanceIdentifier,DBInstanceClass,Engine,DBInstanceStatus]' --output table

Instance details

aws rds describe-db-instances --db-instance-identifier

Snapshots

aws rds describe-db-snapshots --db-instance-identifier

DynamoDB

List tables

aws dynamodb list-tables

Table info

aws dynamodb describe-table --table-name

Query/scan

aws dynamodb scan --table-name

ElastiCache

List clusters

aws elasticache describe-cache-clusters aws elasticache describe-replication-groups

Network Services VPC

List VPCs and subnets

aws ec2 describe-vpcs --query 'Vpcs[].[VpcId,CidrBlock,Tags[?Key==Name].Value|[0]]' --output table aws ec2 describe-subnets --query 'Subnets[].[SubnetId,VpcId,CidrBlock,AvailabilityZone]' --output table

Security groups

aws ec2 describe-security-groups --query 'SecurityGroups[].[GroupId,GroupName,VpcId]' --output table

Route53

List hosted zones

aws route53 list-hosted-zones

List records

aws route53 list-resource-record-sets --hosted-zone-id

CloudFront

List distributions

aws cloudfront list-distributions --query 'DistributionList.Items[].[Id,DomainName,Status]' --output table

Invalidate cache

aws cloudfront create-invalidation --distribution-id --paths "/*"

Monitoring & Logging CloudWatch

List log groups

aws logs describe-log-groups --query 'logGroups[].[logGroupName,storedBytes]' --output table

Tail logs

aws logs tail --follow --since 1h

Get metrics

aws cloudwatch get-metric-statistics \ --namespace AWS/EC2 \ --metric-name CPUUtilization \ --dimensions Name=InstanceId,Value= \ --start-time $(date -u -v-1H +%Y-%m-%dT%H:%M:%SZ) \ --end-time $(date -u +%Y-%m-%dT%H:%M:%SZ) \ --period 300 \ --statistics Average

Cost & Billing

Get current month costs

aws ce get-cost-and-usage \ --time-period Start=$(date +%Y-%m-01),End=$(date +%Y-%m-%d) \ --granularity MONTHLY \ --metrics BlendedCost \ --group-by Type=DIMENSION,Key=SERVICE

Cost by service

aws ce get-cost-and-usage \ --time-period Start=$(date +%Y-%m-01),End=$(date +%Y-%m-%d) \ --granularity DAILY \ --metrics UnblendedCost \ --group-by Type=DIMENSION,Key=SERVICE

AI Services (Bedrock)

List models

aws bedrock list-foundation-models --query 'modelSummaries[].[modelId,providerName]' --output table

List custom models

aws bedrock list-custom-models

Support

Create support case

aws support create-case \ --subject "Issue description" \ --communication-body "Detailed description" \ --service-code amazon-ec2 \ --category-code general-info \ --severity-code low

List cases

aws support describe-cases

IAM

List users and roles

aws iam list-users --query 'Users[].[UserName,CreateDate]' --output table aws iam list-roles --query 'Roles[].[RoleName,CreateDate]' --output table

Get current identity

aws sts get-caller-identity

Output Formatting Guidelines For Query Operations Use --query with JMESPath to filter relevant fields Use --output table for human-readable output Use --output json when detailed data is needed For Status Checks

Provide concise summaries:

✅ EC2 实例状态 ┌─────────────────┬──────────┬────────────┐ │ 实例 ID │ 状态 │ 类型 │ ├─────────────────┼──────────┼────────────┤ │ i-0abc123... │ running │ t3.medium │ └─────────────────┴──────────┴────────────┘

For Modification Operations

Report the action taken and result:

✅ 操作完成 - 操作: 停止 EC2 实例 - 实例: i-0abc123def456 - 之前状态: running - 当前状态: stopping

Error Handling

When AWS CLI commands fail:

Parse the error message to identify the issue Suggest possible solutions Check IAM permissions if access denied Verify resource exists and is in the correct region Integration with GitOps

This skill integrates with the SimplexAI GitOps workflow:

ECR Registry: 830101142436.dkr.ecr.us-east-1.amazonaws.com/simplexai/* EKS Clusters: Production and Staging in us-east-1 Namespaces: production for prod, staging for staging

Reference CLAUDE.md for kubectl cluster aliases:

k1 - AWS Production (EKS) k2 - AWS Staging (EKS)