Cloud, CI/CD, monitoring, and deployment (6.8K skills)
Configure EC2 instances to access AWS services through IAM roles and instance profiles, which supply temporary credentials. Identify required permissions, attach the profile, and verify access without storing permanent credentials in application settings.
Diagnose application failures by finding relevant CloudWatch logs and examining error patterns and stack traces. Follow clues into related AWS configuration, identify likely causes, and produce prioritized recommendations for fixing the problem.
Connect an existing AWS Lambda function to Amazon API Gateway and expose it through an API. Covers authorization, invocation permissions, browser access settings, deployment, testing, and operational controls such as throttling and access logs.
Set up AWS Resilience Hub v2 to assess workloads across multiple AWS accounts from one central account. The skill guides service permissions, cross-account access roles, and troubleshooting for resource discovery and assessment failures.
Set up AWS Resilience Hub v2 with availability and recovery targets, register systems and services, connect infrastructure sources, and run an initial failure mode assessment to check whether the architecture can meet those targets.
Configure AWS Shield Advanced to protect public resources from DDoS attacks, which overwhelm services with traffic. Covers automatic mitigation, health-based detection, expert response support, event review, and requests for credits covering eligible attack-related scaling charges.
Helps connect office or data center networks to AWS through encrypted Site-to-Site VPN tunnels. Covers gateway and routing choices, bandwidth planning, connecting many sites, device configuration guidance, high availability, and tunnel monitoring or troubleshooting.
Set up, connect to, migrate to, and operate Amazon RDS for Db2. Provides AWS CLI workflows for IBM licensing, encrypted connections, backups, recovery, and standby replicas while accounting for the restrictions of a managed database service.
Plan and manage Amazon RDS databases running MySQL, MariaDB, or PostgreSQL. Get production instance setup, upgrade checks, commitment pricing comparisons, connection management advice, and deployment plans that reduce downtime.
Configure VPC endpoints so applications can reach AWS services without internet routing. Set up gateway and interface endpoints, adjust security groups, routes, and DNS, and troubleshoot connection failures or restrictive endpoint policies.
Use AWS DMS Schema Conversion to assess and convert database structures between different database engines. Review compatibility reports, inspect object definitions, export converted SQL scripts to S3, and apply converted structures to a live target database.
Set up CloudWatch monitoring for applications and AI agents, from workspaces and access permissions to sending logs, metrics, and traces—records of execution paths. It covers initial setup for both Omni and Application Signals.
Helps diagnose connection, authentication, networking, and driver problems with Amazon RDS for Oracle. Provides guidance for Lambda and EKS connections, encrypted access, connection pools that reuse database sessions, and Oracle Connection Manager proxy setups.
Connect applications to Amazon RDS for SQL Server with guidance on drivers, encrypted connections, authentication, and networking. Diagnose connection timeouts, login failures, and Windows authentication problems across supported languages and AWS deployment environments.
Build custom machine images for EC2 and container images with EC2 Image Builder. Set up scheduled rebuilds for operating system updates, configure image distribution, and investigate failed builds using logs and platform-specific guidance.
Understand and design cross-Region recovery with Amazon Application Recovery Controller (ARC) Region switch. Get guidance on recovery plans, execution workflows, triggers, cross-account permissions, recovery timing, and troubleshooting for applications already deployed across Regions.
Build an AWS VPC, an isolated cloud network, across multiple Availability Zones. Configure public and private subnets, address ranges, internet and NAT gateways, routing, and security groups to support a production network layout.
Configure AWS Transit Gateway as a central router for multiple VPCs, isolated cloud networks, and on-premises networks. Set up traffic separation, shared internet access, firewall inspection, connections between Regions, and migration from existing VPC peering connections.
Connect an AI agent to remote Windows applications on Amazon WorkSpaces Applications through MCP, a protocol for agent tools. Get guidance on connection setup, mouse and keyboard actions, session cleanup, and troubleshooting connection failures.
Plan a move from self-managed Apache Kafka to Amazon MSK Express. Inventory the source cluster, assess compatibility, produce sizing and cost reports, optionally test the workload on a trial cluster, and guide replication and cutover.
Diagnose Amazon MWAA workflow failures using APIs and CloudWatch logs across Provisioned and Serverless environments. Identify failed tasks, import problems, memory shortages, and dependency changes, then report evidence, impact, immediate fixes, and prevention steps.
Set up and maintain Amazon DocumentDB, a managed document database compatible with MongoDB. Assess migration compatibility, configure secure connections, design data and indexes, diagnose slow queries, and produce migration plans, upgrade plans, and operational review reports.
Troubleshoot AWS Clean Rooms access failures and missing logs for custom machine learning jobs. Identify which IAM roles, storage policies, encryption permissions, or logging settings need investigation, including access across AWS accounts.
Helps choose an AWS database based on application needs and data structure. Compares suitable services, checks service facts against reference material, and routes setup, migration, operations, and workload cost questions to the relevant service skill.