The Agent Skills Directory

[AWS Best Practices]: The skill correctly emphasizes the use of IAM roles with ephemeral credentials via STS and explicitly warns against hardcoding secrets or long-lived access keys.
[Least Privilege]: The documentation provides a specific list of required IAM permissions (ses:CreateEmailIdentity, ses:GetEmailIdentity, etc.) and recommends scoping these permissions to the specific domain resource rather than using broad wildcards.
[User Consent for Mutations]: The skill includes a critical rule to ask the user for explicit permission before automating DNS record creation in Route 53, preventing accidental disruption of live traffic.
[Security Guidance]: It includes recommendations for DMARC policy progression (starting at p=none for monitoring) and mentions the importance of CloudTrail for auditing SES API calls.
[Standard Tooling]: All operations utilize standard aws-cli commands or the official AWS MCP Server for sandboxed execution, which are trusted methods for AWS resource management.

amazon-ses