AWS Skill
Provides comprehensive AWS cloud capabilities for the Golden Armada AI Agent Fleet Platform.
When to Use This Skill
Activate this skill when working with:
- AWS infrastructure provisioning
- EKS cluster management
- S3 storage operations
- Lambda functions
- IAM and security
AWS CLI Quick Reference
Configuration
# Configure credentials
aws configure
# Check identity
aws sts get-caller-identity
# Set profile
export AWS_PROFILE=production aws s3 ls --profile production ```
### EC2
List instances
aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,State.Name,Tags[?Key==Name].Value]'
Start/Stop
aws ec2 start-instances --instance-ids i-1234567890 aws ec2 stop-instances --instance-ids i-1234567890
Create instance
aws ec2 run-instances --image-id ami-12345678 --instance-type t3.medium --key-name my-key --security-group-ids sg-12345678 --subnet-id subnet-12345678 --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=my-instance}]' ```
EKS
# List clusters
aws eks list-clusters
# Update kubeconfig
aws eks update-kubeconfig --name golden-armada-cluster --region us-west-2
# Describe cluster
aws eks describe-cluster --name golden-armada-cluster
# Create cluster (with eksctl)
eksctl create cluster --name golden-armada-cluster --region us-west-2 --nodegroup-name workers --node-type t3.medium --nodes 3 --managed ```
### S3
List buckets
aws s3 ls
List objects
aws s3 ls s3://bucket-name/
Copy files
aws s3 cp file.txt s3://bucket-name/ aws s3 cp s3://bucket-name/file.txt. aws s3 sync./local-dir s3://bucket-name/prefix/
Presigned URL
aws s3 presign s3://bucket-name/file.txt --expires-in 3600 ```
Lambda
# List functions
aws lambda list-functions
# Invoke function
aws lambda invoke --function-name my-function --payload '{"key": "value"}' response.json
# Update function code
aws lambda update-function-code --function-name my-function --zip-file fileb://function.zip
# View logs
aws logs filter-log-events --log-group-name /aws/lambda/my-function --start-time $(date -d '1 hour ago' +%s000) ```
### RDS
List instances
aws rds describe-db-instances
Create snapshot
aws rds create-db-snapshot --db-instance-identifier golden-armada-db --db-snapshot-identifier snapshot-$(date +%Y%m%d)
Modify instance
aws rds modify-db-instance --db-instance-identifier golden-armada-db --db-instance-class db.t3.large --apply-immediately ```
IAM
# List users
aws iam list-users
# Create role
aws iam create-role --role-name agent-role --assume-role-policy-document file://trust-policy.json
# Attach policy
aws iam attach-role-policy --role-name agent-role --policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess ```
## Boto3 Python SDK
S3 operations
s3 = boto3.client('s3')
Upload file
s3.upload_file('local.txt', 'bucket-name', 'remote.txt')
Download file
s3.download_file('bucket-name', 'remote.txt', 'local.txt')
List objects
response = s3.list_objects_v2(Bucket='bucket-name', Prefix='prefix/') for obj in response.get('Contents', []): print(obj['Key'])
EC2 operations
ec2 = boto3.resource('ec2')
Get all running instances
instances = ec2.instances.filter(Filters=[{'Name': 'instance-state-name', 'Values': ['running']}]) for instance in instances: print(f"{instance.id}: {instance.instance_type}")
Lambda invocation
lambda_client = boto3.client('lambda') response = lambda_client.invoke(FunctionName='my-function', InvocationType='RequestResponse', Payload=json.dumps({'key': 'value'})) result = json.loads(response['Payload'].read()) ```
Terraform AWS Resources
# VPC
resource "aws_vpc" "main" {cidr_block = "10.0.0.0/16" enable_dns_hostnames = true enable_dns_support = true
tags = {Name = "golden-armada-vpc"}}
# EKS Cluster
resource "aws_eks_cluster" "main" {name = "golden-armada-cluster" role_arn = aws_iam_role.cluster.arn version = "1.28"
vpc_config {subnet_ids = aws_subnet.private[*].id}}
# RDS Instance
resource "aws_db_instance" "main" {identifier = "golden-armada-db" engine = "postgres" engine_version = "15" instance_class = "db.t3.medium" allocated_storage = 20
db_name = "golden_armada" username = var.db_username password = var.db_password
vpc_security_group_ids = [aws_security_group.db.id] db_subnet_group_name = aws_db_subnet_group.main.name
skip_final_snapshot = true} ```
## Best Practices
1. **Use IAM Roles** instead of access keys
2. **Enable CloudTrail** for audit logging
3. **Tag all resources** for cost tracking
4. **Use VPC** for network isolation
5. **Enable encryption** at rest and in transit
6. **Implement least privilege** IAM policies