인프라·DevOps 스킬

Manage TypeScript application settings centrally with Azure App Configuration. Covers environment-specific settings, runtime refresh, and feature flags that control feature availability, plus Key Vault references and snapshots for preserving release configurations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Separating development and production settings
• Refreshing settings while an app is running
• Rolling out features to selected users or groups

Manage container images in Azure Container Registry using Python. Inspect repositories, tags, and image metadata, protect images from deletion, download image data, and identify older untagged images for cleanup.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspect image tags and metadata
• Protect production images from deletion
• Clean up older untagged images

Estimate AWS costs before deployment, analyze spending trends, and investigate metrics and logs with CloudWatch. The skill guides cost reviews, alert setup, and operational improvements through connected tools, with additional integrations for audits and security assessments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Estimating monthly AWS costs before deployment
• Investigating unexpected charges and spending trends
• Setting up CloudWatch alarms and investigating logs

Deploy and operate AI agents with AWS Bedrock AgentCore. Choose services for hosting agents, connecting external APIs, managing credentials and conversation state, monitoring activity, and assessing agent quality through automated evaluations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Plan an agent deployment on AgentCore
• Expose a REST API as an agent tool through MCP
• Configure credentials and access controls

Design and configure an AWS VPC, a private cloud network, with separate public, application, and database subnets. Covers traffic routing, access rules, private service connections, and troubleshooting connectivity between resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build separate networks for production and development
• Separate public, application, and database resources
• Connect VPCs or access AWS services privately

Design AWS applications that run without managing servers and respond to events. Get guidance on Lambda APIs, asynchronous workflows, retries, monitoring, and scaling, with implementation patterns based on the AWS Well-Architected Framework.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing APIs backed by Lambda
• Building asynchronous job processing
• Coordinating services with Step Functions

Build and maintain an inventory of hardware, software, and cloud resources. Use guidance on automated discovery, ownership records, tagging checks, and integration with a configuration database to support operations and audit preparation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining fields for an IT asset inventory
• Planning resource discovery across AWS, Azure, and GCP
• Checking ownership and cost allocation tags

Build and refactor AWS infrastructure with TypeScript or Python using AWS CDK, a toolkit for defining cloud resources in code. Get guidance on resource selection, Lambda packaging, stack organization, and checks before deployment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating AWS CDK stacks and reusable components
• Refactoring existing infrastructure code
• Adding Lambda functions to a CDK application

Identify unused AWS resources, estimate potential savings, and prepare cleanup scripts with preview steps. Covers storage retention policies and scheduled cleanup so teams can review dependencies before removing resources and track the resulting savings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inventory unused resources and estimate savings
• Prepare cleanup scripts for EBS volumes and Elastic IPs
• Review S3 versions and storage retention rules

Analyze AWS spending by service, region, and resource tags to find unused resources and oversized configurations. Get specific cost reduction recommendations, estimated savings, and guidance for budgets and ongoing cost monitoring.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Compare monthly AWS spending by service
• Find unused storage and idle instances
• Estimate savings from configuration changes

Provision and manage Amazon RDS relational databases on AWS. Follow guidance for backups, recovery, security, monitoring, multi-zone redundancy, and read replicas—database copies that handle read traffic—with AWS CLI commands and a Terraform configuration example.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploy a managed PostgreSQL or MySQL database
• Configure multi-zone redundancy and read replicas
• Set up backups and restore to a specific point in time

Configure and audit AWS users, roles, and access policies. Work through least-privilege permissions, granting only the access needed, along with GitHub Actions authentication, cross-account access, permission boundaries, and checks for unused or excessive access.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create execution roles for EC2 and Lambda
• Design policies with only the required permissions
• Configure GitHub Actions authentication through OIDC

Deploy container applications on AWS using ECS and Fargate, which runs containers without managing servers. Covers image publishing, task configuration, load balancing, automatic scaling, deployment updates, and troubleshooting failed or unhealthy containers.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploy Docker applications on Fargate
• Configure load balancing and automatic scaling
• Investigate failed tasks and health checks

Plan AWS infrastructure changes by checking application requirements and existing configuration, then selecting guidance from an external skill collection. Produces a reviewable plan covering access permissions, networking, cost assumptions, validation, and rollback.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing an AWS architecture for an existing application
• Reviewing an infrastructure plan before deployment
• Planning changes with minimal access permissions

Configure MCP connections, which link AI agents to tools, for AWS documentation search and API access. Check existing settings, choose between documentation-only and full API access, verify available tools, and troubleshoot connection or credential problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up AWS documentation search for an AI agent
• Configure an MCP connection for AWS API access
• Check existing AWS MCP settings

Review AWS spending and identify savings through resource sizing, unused resource cleanup, discount commitments, and storage policies. It also guides budget alerts and recurring cost reviews so teams can track spending and plan changes using usage data.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating an unexpected AWS bill increase
• Preparing cost reviews with engineering and finance
• Comparing Savings Plans and Reserved Instances

Manage AWS infrastructure as TypeScript code with SST v4 and Pulumi. Guides resource creation, connections between services, infrastructure tests, deployment checks, troubleshooting, and resource migrations while accounting for existing project conventions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding AWS resources to an SST v4 application
• Connecting resources and reviewing access permissions
• Adding infrastructure tests and reviewing deployment changes

Configure Amazon S3 storage with encryption, access restrictions, and version history. Set rules for moving or deleting older files, replicate data across regions, create temporary access links, and investigate permission or policy problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create buckets with encryption and public access blocked
• Set rules for archiving or deleting older files
• Replicate data to another region

Deploy and manage virtual servers on Amazon EC2. Covers instance selection, reusable machine images and launch templates, automatic capacity changes, Spot instances, and troubleshooting, with AWS CLI commands and Terraform configuration examples.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Launch EC2 servers for application hosting
• Create reusable machine images and launch templates
• Configure automatic scaling for changing demand

Set up AWS CloudTrail to record activity across accounts, protect audit logs, and alert on sensitive operations. Includes guidance for querying past events with Athena or CloudTrail Lake and checking log integrity during investigations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up audit logging across AWS accounts
• Investigate suspicious API activity
• Configure alerts for sensitive operations

Review Monte Carlo alerts, score their likelihood of indicating an incident and their potential impact, and investigate likely causes. Use the same stages to design and test a repeatable triage workflow, starting with recommendations before enabling actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing recent Monte Carlo alerts
• Prioritizing alerts by incident likelihood and impact
• Designing and testing a recurring triage workflow

Build and deploy AWS Lambda functions without managing servers. Guidance covers APIs, scheduled jobs, event triggers, permissions, shared dependencies, and performance tuning, with code and command examples for deployment and troubleshooting.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building lightweight APIs with API Gateway or function URLs
• Running scheduled jobs with EventBridge
• Processing S3 uploads or SQS messages

Build AWS applications that run without managing servers directly. Covers Lambda functions, APIs, DynamoDB storage, message-driven workflows with SQS/SNS, deployment through SAM/CDK, and reducing the delay when a function starts for the first time.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building an API with Lambda and API Gateway
• Developing an application backed by DynamoDB
• Designing event-driven workflows with SQS/SNS

Build and manage Linux containers on Apple silicon Macs with Apple's container CLI. Run each container in its own lightweight virtual machine, and get guidance on images, networking, storage, and translating familiar Docker workflows to this tool.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building container images from a Dockerfile
• Running Linux containers on an Apple silicon Mac
• Managing persistent volumes and container networks