The Agent Skills Directory

Standard Infrastructure Operations: The skill acts as a domain expert for AWS networking, utilizing the AWS MCP server and CLI to perform configurations. These operations are within the expected scope of a cloud management tool.- Security-First Configuration: The instructions mandate several security controls, including Transit Gateway Flow Logs, CloudTrail auditing, and KMS encryption with scoped policy conditions to prevent cross-account misuse.- Credential Management: The skill explicitly forbids the use of long-lived IAM access keys, requiring instead short-lived, ephemeral credentials via AWS STS or IAM Identity Center. It also instructs the use of AWS Secrets Manager for pre-shared keys (PSKs) rather than hardcoding them.- Least Privilege Enforcement: Multiple references emphasize the use of least-privilege IAM policies, avoiding service-wide wildcards and restricting access to specific Transit Gateway operations.- Safe Data Handling: While the skill processes user-supplied parameters (e.g., VPC IDs, CIDR blocks) to fulfill AWS CLI commands, it provides clear structures and validation checks (like overlapping CIDR checks) to minimize misconfiguration risks.

transitgateway