The Agent Skills Directory

[Secure Parameter Handling]: The skill provides clear guidance on managing sensitive configuration data. For example, it instructs the agent to store BGP MD5 authentication keys and MACsec CKN/CAK pairs in AWS Secrets Manager or SSM Parameter Store rather than using plaintext, which is a standard security best practice.
[Least Privilege and Ephemeral Credentials]: The skill emphasizes the use of ephemeral IAM credentials (such as AWS SSO or IAM roles) and scoped IAM permissions. It explicitly warns against using long-lived access keys or granting overly broad permissions, reducing the impact of potential credential compromise.
[Safe Utility Usage]: In the connection setup process, the skill uses standard system utilities like base64 --decode to process the Letter of Authorization (LOA-CFA) retrieved from the AWS API. This is a documented part of the Direct Connect provisioning workflow and includes warnings to the user to treat the resulting files as sensitive.
[Administrative Command Execution]: The skill utilizes the AWS CLI for managing network infrastructure. These commands are executed within a sandboxed environment when using the AWS MCP server, and the skill provides instructions for monitoring these actions via AWS CloudTrail and CloudWatch.

directconnect