aws-agent-skills MCP — Сценарии использования, Установка & Живое демо

Зачем использовать

Ключевые функции

18 core AWS services covered (IAM, Lambda, DynamoDB, S3, API Gateway, EC2, ECS, EKS, CFN, CloudWatch, RDS, SQS, SNS, Cognito, Step Functions, Secrets Manager, EventBridge, Bedrock)
Each SKILL.md includes CLI reference with real flags, not guessed ones
Common-pattern section per service surfaces production idioms
Security best-practices baked in (least-privilege IAM, encryption defaults)
Metadata tracks last-updated so you know the reference's freshness

Живое демо

Как выглядит на практике

aws-agent-skill.replay ▶ готово

0/0

Установка

Выберите клиент

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "aws-agent-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/itsmostafa/aws-agent-skills",
        "~/.claude/skills/aws-agent-skills"
      ],
      "_inferred": true
    }
  }
}

Откройте Claude Desktop → Settings → Developer → Edit Config. Перезапустите после сохранения.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "aws-agent-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/itsmostafa/aws-agent-skills",
        "~/.claude/skills/aws-agent-skills"
      ],
      "_inferred": true
    }
  }
}

Cursor использует ту же схему mcpServers, что и Claude Desktop. Конфиг проекта приоритетнее глобального.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "aws-agent-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/itsmostafa/aws-agent-skills",
        "~/.claude/skills/aws-agent-skills"
      ],
      "_inferred": true
    }
  }
}

Щёлкните значок MCP Servers на боковой панели Cline, затем "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "aws-agent-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/itsmostafa/aws-agent-skills",
        "~/.claude/skills/aws-agent-skills"
      ],
      "_inferred": true
    }
  }
}

Тот же формат, что и Claude Desktop. Перезапустите Windsurf для применения.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "aws-agent-skill",
      "command": "git",
      "args": [
        "clone",
        "https://github.com/itsmostafa/aws-agent-skills",
        "~/.claude/skills/aws-agent-skills"
      ]
    }
  ]
}

Continue использует массив объектов серверов, а не map.

~/.config/zed/settings.json

{
  "context_servers": {
    "aws-agent-skill": {
      "command": {
        "path": "git",
        "args": [
          "clone",
          "https://github.com/itsmostafa/aws-agent-skills",
          "~/.claude/skills/aws-agent-skills"
        ]
      }
    }
  }
}

Добавьте в context_servers. Zed перезагружается автоматически.

claude mcp add aws-agent-skill -- git clone https://github.com/itsmostafa/aws-agent-skills ~/.claude/skills/aws-agent-skills

Однострочная команда. Проверить: claude mcp list. Удалить: claude mcp remove.

Сценарии использования

Реальные сценарии: aws-agent-skills

Write a least-privilege IAM policy for a Lambda + DynamoDB pair

👤 Backend engineers setting up AWS resources ⏱ ~15 min intermediate

Когда использовать: You're wiring a Lambda to a Dynamo table and don't want to give it * permissions.

Поток

State the access needed

Use the aws iam + lambda skills. Write a policy for a Lambda that needs GetItem and UpdateItem on table Orders and nothing else.✓ Скопировано

→ Policy with exact actions + resource ARN, no wildcards
Test

Give me the aws iam simulate-custom-policy command to verify this allows only those two actions.✓ Скопировано

→ Runnable command with correct syntax

Итог: A production-quality least-privilege IAM policy with verification.

Подводные камни

Policy uses wildcards for convenience — Insist on exact resource ARNs — skill supports this strongly

Сочетать с: terraform-skill

Design an EventBridge → Step Functions → Lambda pipeline

👤 Serverless engineers ⏱ ~40 min advanced

Когда использовать: You need an event-driven workflow and want the right service boundaries.

Поток

Sketch the flow

Use the eventbridge + step-functions + lambda skills. Design a pipeline that triggers on S3 uploads, orchestrates 3 steps, and writes to DynamoDB.✓ Скопировано

→ Architecture diagram + IaC snippets
Observability

Now add CloudWatch alarms and structured logging.✓ Скопировано

→ Specific metric filters and alarm thresholds

Итог: A buildable serverless architecture with monitoring.

Подводные камни

Step Functions costs explode at scale — Skill flags when Express workflows fit better than Standard

Сочетать с: terraform-skill

Scaffold a Bedrock-backed RAG service

👤 Engineers building LLM features on AWS ⏱ ~60 min advanced

Когда использовать: You want to use Bedrock for embeddings + generation without piecing it together from blog posts.

Поток

Describe the service

Use the bedrock + s3 + dynamodb skills. Scaffold a RAG service: upload docs to S3, embed with Titan, store in DynamoDB, retrieve + generate at query time.✓ Скопировано

→ Runnable code with correct Bedrock invoke calls and embedding model IDs

Итог: A first-pass RAG scaffold on AWS-native services.

Подводные камни

Using Dynamo for vector search at scale — Skill notes when OpenSearch or pgvector is a better fit

Комбинации

Сочетайте с другими MCP — эффект x10

aws-agent-skill + terraform-skill

AWS skills propose the design; Terraform skill writes the HCL

Design the Lambda+Dynamo stack using the aws skills, then have terraform-skill write the module.✓ Скопировано

aws-agent-skill + aws

Skill tells Claude the right calls; AWS MCP actually runs them

Use the aws-agent-skills to design the policy, then apply it via the aws MCP.✓ Скопировано

Инструменты

Что предоставляет этот MCP

Инструмент	Входные данные	Когда вызывать
IAM skill	role/policy intent	Any AWS permissions work
Lambda skill	function spec	Serverless function design
DynamoDB skill	access patterns	NoSQL modeling
CloudFormation skill	resources	IaC in CFN
Bedrock skill	LLM use case	Using AWS-native GenAI

Стоимость и лимиты

Во что обходится

Квота API: None for the skill
Токенов на вызов: 3-8k per service loaded
Деньги: Free — skill is local. AWS usage costs are yours.
Совет: Name the services you're using so Claude loads only those SKILL.md files.

Безопасность

Права, секреты, радиус поражения

Хранение учётных данных: No credentials in the skill. Real AWS calls should use OIDC roles, not static keys.

Исходящий трафик: None from the skill itself

Double-check generated IAM policies before deploying — the skill aims for least-privilege but you know your workload best.

Устранение неполадок

Частые ошибки и исправления

CLI flag rejected by actual AWS CLI

AWS occasionally renames flags. Check the service's last-updated metadata; cross-reference official docs if stale.

Проверить: aws <service> <command> help

Claude uses SDK v2 patterns for Python boto3

Boto3 is v1 (and stable); don't confuse with AWS SDK for JS v2/v3. Specify language explicitly.

Альтернативы

aws-agent-skills в сравнении

Альтернатива	Когда использовать	Компромисс
aws MCP	You want Claude to actually call AWS, not just write snippets	MCP executes; this skill informs
cloud-provider-agnostic IaC skills (pulumi, cdk)	You prefer code-first IaC	Different mental model

Ещё

Ресурсы

📖 Читать официальный README на GitHub

🐙 Открытые задачи

🔍 Все 400+ MCP-серверов и Skills