The Agent Skills Directory

[Command Execution]: The skill executes shell commands to interact with AWS services via the AWS CLI and custom scripts. This is a primary function of the skill, used for cluster management and migration tasks.
[External Downloads]: The skill fetches the official Amazon RDS global CA bundle and clones the amazon-documentdb-tools repository from the AWS Labs GitHub organization. These are trusted sources provided by the service vendor for secure connection and compatibility assessment.
[Credential Management]: The skill encourages the use of AWS Secrets Manager via the --manage-master-user-password flag, which is a security best practice to avoid hardcoding secrets in shell history or configuration files.
[Security Group Configuration]: The skill provides instructions for configuring security groups but explicitly warns against using broad CIDR ranges like 0.0.0.0/0, recommending security-group-to-security-group rules instead.
[Safe Practices]: The wa_review.py script performs read-only infrastructure and database checks to identify potential security gaps, such as missing deletion protection or audit logging, and provides remediation commands for the user to review and apply.

amazon-documentdb