skills/aws/agent-toolkit-for-aws/developing-applications-on-managed-service-for-apache-flink/Gen Agent Trust Hub
developing-applications-on-managed-service-for-apache-flink
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [Credential Management]: The skill correctly emphasizes using AWS Secrets Manager for database credentials rather than hardcoding them in application code or runtime properties. It provides clear patterns for fetching secrets at job startup using the AWS SDK, which is a foundational security best practice for managed services.
- [Dependency Management]: The instructions reference standard, versioned artifacts from established organizations like Apache and AWS. The use of Maven Central for dependency resolution and the inclusion of specific version mapping ensures that developers use verified and compatible software components.
- [Configuration Separation]: The guidance promotes a clean separation between local development environments and production service configurations. This practice helps prevent the accidental leakage of development-time settings into production environments and ensures the application respects the managed constraints of the MSF environment.
- [Operational Best Practices]: The skill includes detailed advice on IAM execution roles, advocating for the principle of least privilege. It provides specific examples of scoped IAM policies that restrict access to only necessary resources like S3 buckets, Kinesis streams, and CloudWatch log groups.
Audit Metadata