The Agent Skills Directory

[Standard AWS Operations]: The skill uses official AWS CLI commands (such as aws cloudfront, aws acm, and aws sts) to manage CloudFront distributions, certificates, and logging. These operations are within the expected scope of AWS resource management.
[Security-First Configuration]: The instructions consistently prioritize secure configurations, including the use of Origin Access Control (OAC), enforcement of modern TLS versions (1.2+), and mandatory encryption for log destinations.
[Trusted Resource References]: All external links point to official AWS documentation domains and the AWS Management Console, ensuring that information and configuration interfaces are from verified sources.
[Credential Management Best Practices]: The skill explicitly advises using aws sts get-caller-identity to verify the execution environment and recommends storing sensitive signing keys in AWS Secrets Manager rather than local configuration files.
[Audit and Observability]: The skill integrates logging and AWS CloudTrail auditing as a primary step in distribution management, ensuring a forensic trail is available for all configuration changes and access requests.

cloudfront