AWS CLI Skill
This skill enables comprehensive AWS cloud infrastructure management using the AWS CLI tool.
Environment
- Default Region:
us-east-1 - AWS CLI: Pre-configured with full account permissions
- Account: SimplexAI AWS account (ID: 830101142436)
Safety Protocol
Dangerous Operations Requiring Confirmation
Before executing any of the following operations, explicitly confirm with the user:
- Delete operations:
delete-*,remove-*,terminate-*,deregister-* - Destructive modifications:
modify-*on production resources,update-*that changes critical settings - State changes:
stop-*,reboot-*on production instances - Security changes: IAM policy modifications, security group rule changes
- Cost implications: Creating expensive resources (large EC2 instances, NAT gateways, etc.)
Confirmation Format
⚠️ 危险操作确认
操作: [具体操作描述]
影响: [潜在影响说明]
资源: [受影响的资源标识]
是否继续执行？Common Operations Reference
Compute Services
EC2
# List instances
aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,State.Name,InstanceType,Tags[?Key==`Name`].Value|[0]]' --output table
# Instance state management
aws ec2 start-instances --instance-ids <id>
aws ec2 stop-instances --instance-ids <id>
aws ec2 reboot-instances --instance-ids <id>ECS
# List clusters and services
aws ecs list-clusters
aws ecs list-services --cluster <cluster-name>
aws ecs describe-services --cluster <cluster-name> --services <service-name>
# View running tasks
aws ecs list-tasks --cluster <cluster-name> --service-name <service-name>
aws ecs describe-tasks --cluster <cluster-name> --tasks <task-arn>
# Force new deployment
aws ecs update-service --cluster <cluster-name> --service <service-name> --force-new-deploymentEKS
# List clusters
aws eks list-clusters
aws eks describe-cluster --name <cluster-name>
# Update kubeconfig
aws eks update-kubeconfig --name <cluster-name> --region us-east-1Lambda
# List functions
aws lambda list-functions --query 'Functions[].[FunctionName,Runtime,LastModified]' --output table
# Invoke function
aws lambda invoke --function-name <name> --payload '{}' response.json
# View logs
aws logs tail /aws/lambda/<function-name> --followStorage Services
S3
# List buckets and objects
aws s3 ls
aws s3 ls s3://<bucket-name>/ --recursive --human-readable
# Copy and sync
aws s3 cp <local-file> s3://<bucket>/<key>
aws s3 sync <local-dir> s3://<bucket>/<prefix>
# Bucket info
aws s3api get-bucket-location --bucket <bucket-name>
aws s3api get-bucket-versioning --bucket <bucket-name>ECR
# List repositories
aws ecr describe-repositories --query 'repositories[].[repositoryName,repositoryUri]' --output table
# List images in repository
aws ecr describe-images --repository-name simplexai/<service> --query 'imageDetails | sort_by(@, &imagePushedAt) | [-10:].[imageTags[0],imagePushedAt]' --output table
# Get login token
aws ecr get-login-password --region us-east-1Database Services
RDS
# List instances
aws rds describe-db-instances --query 'DBInstances[].[DBInstanceIdentifier,DBInstanceClass,Engine,DBInstanceStatus]' --output table
# Instance details
aws rds describe-db-instances --db-instance-identifier <id>
# Snapshots
aws rds describe-db-snapshots --db-instance-identifier <id>DynamoDB
# List tables
aws dynamodb list-tables
# Table info
aws dynamodb describe-table --table-name <table>
# Query/scan
aws dynamodb scan --table-name <table> --limit 10ElastiCache
# List clusters
aws elasticache describe-cache-clusters
aws elasticache describe-replication-groupsNetwork Services
VPC
# List VPCs and subnets
aws ec2 describe-vpcs --query 'Vpcs[].[VpcId,CidrBlock,Tags[?Key==`Name`].Value|[0]]' --output table
aws ec2 describe-subnets --query 'Subnets[].[SubnetId,VpcId,CidrBlock,AvailabilityZone]' --output table
# Security groups
aws ec2 describe-security-groups --query 'SecurityGroups[].[GroupId,GroupName,VpcId]' --output tableRoute53
# List hosted zones
aws route53 list-hosted-zones
# List records
aws route53 list-resource-record-sets --hosted-zone-id <zone-id>CloudFront
# List distributions
aws cloudfront list-distributions --query 'DistributionList.Items[].[Id,DomainName,Status]' --output table
# Invalidate cache
aws cloudfront create-invalidation --distribution-id <id> --paths "/*"Monitoring & Logging
CloudWatch
# List log groups
aws logs describe-log-groups --query 'logGroups[].[logGroupName,storedBytes]' --output table
# Tail logs
aws logs tail <log-group-name> --follow --since 1h
# Get metrics
aws cloudwatch get-metric-statistics \
--namespace AWS/EC2 \
--metric-name CPUUtilization \
--dimensions Name=InstanceId,Value=<instance-id> \
--start-time $(date -u -v-1H +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--statistics AverageCost & Billing
# Get current month costs
aws ce get-cost-and-usage \
--time-period Start=$(date +%Y-%m-01),End=$(date +%Y-%m-%d) \
--granularity MONTHLY \
--metrics BlendedCost \
--group-by Type=DIMENSION,Key=SERVICE
# Cost by service
aws ce get-cost-and-usage \
--time-period Start=$(date +%Y-%m-01),End=$(date +%Y-%m-%d) \
--granularity DAILY \
--metrics UnblendedCost \
--group-by Type=DIMENSION,Key=SERVICEAI Services (Bedrock)
# List models
aws bedrock list-foundation-models --query 'modelSummaries[].[modelId,providerName]' --output table
# List custom models
aws bedrock list-custom-modelsSupport
# Create support case
aws support create-case \
--subject "Issue description" \
--communication-body "Detailed description" \
--service-code amazon-ec2 \
--category-code general-info \
--severity-code low
# List cases
aws support describe-casesIAM
# List users and roles
aws iam list-users --query 'Users[].[UserName,CreateDate]' --output table
aws iam list-roles --query 'Roles[].[RoleName,CreateDate]' --output table
# Get current identity
aws sts get-caller-identityOutput Formatting Guidelines
For Query Operations
- Use
--querywith JMESPath to filter relevant fields - Use
--output tablefor human-readable output - Use
--output jsonwhen detailed data is needed
For Status Checks
Provide concise summaries:
✅ EC2 实例状态
┌─────────────────┬──────────┬────────────┐
│ 实例 ID │ 状态 │ 类型 │
├─────────────────┼──────────┼────────────┤
│ i-0abc123... │ running │ t3.medium │
└─────────────────┴──────────┴────────────┘For Modification Operations
Report the action taken and result:
✅ 操作完成
- 操作: 停止 EC2 实例
- 实例: i-0abc123def456
- 之前状态: running
- 当前状态: stoppingError Handling
When AWS CLI commands fail:
- Parse the error message to identify the issue
- Suggest possible solutions
- Check IAM permissions if access denied
- Verify resource exists and is in the correct region
Integration with GitOps
This skill integrates with the SimplexAI GitOps workflow:
- ECR Registry:
830101142436.dkr.ecr.us-east-1.amazonaws.com/simplexai/* - EKS Clusters: Production and Staging in us-east-1
- Namespaces:
productionfor prod,stagingfor staging
Reference CLAUDE.md for kubectl cluster aliases:
k1- AWS Production (EKS)k2- AWS Staging (EKS)