AWS Skill

A CLI wrapper over AWS that encodes our patterns: customer-tagged resources, safe defaults, multi-account auth, intent-level commands. Use it instead of the AWS console for routine ops.

When to use this skill

• Any AWS read (ec2, s3, iam, rds, lambda, vpc, route53, cloudwatch, ecr, eks)
• Cost lookups (last-30d, by-service, by-tag, per-customer report)
• Provisioning a static-IP jump host for a customer engagement (jumphost)
• Generating a Terraform module from an intent op (terraform jumphost)
• Running a security audit (open SGs, public S3, old IAM keys, no-MFA users, public RDS)
• Hunting untagged resources (cleanup untagged)
• Cross-service inventory by customer or tag
• First-time AWS setup on this machine (setup subcommand)

Do NOT use for:

• IAM writes (do those in console / Terraform — too easy to break things)
• Bulk S3 sync (use aws s3 sync directly — built for it)
• Cluster creation / deletion (Terraform / eksctl — declarative beats imperative)