skills/aws/agent-toolkit-for-aws/creating-amazon-aurora-db-cluster-with-instances/Gen Agent Trust Hub
creating-amazon-aurora-db-cluster-with-instances
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [AWS Command Execution]: The skill uses the
call_awstool to execute standard AWS CLI commands (e.g.,aws rds create-db-cluster,aws rds describe-db-instances). These commands are essential for its primary function of managing cloud resources. - [Credential Safety Best Practices]: The instructions explicitly prohibit retrieving or displaying actual password values, mandating the use of AWS Secrets Manager's
--manage-master-user-passwordfeature to ensure credentials are never exposed in logs or outputs. - [Data Protection]: Encryption at rest is enabled by default via the
--storage-encryptedflag and supports custom KMS keys, aligning with production-ready security standards.
Audit Metadata