aws avatar

Querying Aws S3

This teaches Claude to query S3 system tables instead of paginating through list-objects-v2 calls. If you're counting millions of objects, auditing who uploaded or deleted files, or filtering by tags, the inventory and journal tables answer in seconds what would take thousands of API calls. The skill includes a decision tree showing when system tables beat raw APIs, handles catalog setup and permissions, and covers both S3 Metadata tables (journal, inventory, annotation) and Storage Lens exports. One catch: you need to enable metadata tracking first, and the skill walks through that configuration. It's built for the AWS MCP server but works anywhere with credentials and Athena access.

skills.sh installs
6K
GitHub stars
3.4K
last updated
Aug 21, 2026

Install

$ npx -y skills add aws/agent-toolkit-for-aws --skill querying-aws-s3 --agent claude-code

Installs into .claude/skills of the current project.

Files

Query AWS S3 System Tables

Overview

Works best with the AWS MCP server for sandboxed execution and audit logging. All commands below use the AWS CLI and work in any environment with configured AWS credentials. Use IAM roles or temporary credentials; avoid long-lived access keys.

Amazon S3 Metadata provides continuously-updated Apache Iceberg tables that capture object-level metadata for general-purpose buckets. S3 Storage Lens exports aggregated storage and activity metrics as Iceberg tables. Both are read-only, stored in the AWS-managed aws-s3 table bucket, and queryable via Amazon Athena.

System tables are preferred over raw S3 APIs (list-objects-v2, head-object) because:

Sponsors

Details

Repository
github.com/aws/agent-toolkit-for-aws
Categories
AI & Agent Building, Release Management, Cloud & Infrastructure, Databases
First seen
Jul 14, 2026

More from aws/agent-toolkit-for-aws

All 56
1forcedotcom avataragentforce-generateforcedotcom/sf-skillsBuild, modify, optimize, debug, and deploy agents with Agentforce Agent Script. TRIGGER when: user creates, modifies, optimizes, or asks about .agent files or a6Kskills.sh installs
2forcedotcom avataragentforce-architecture-analyzeforcedotcom/sf-skillsDeclared architecture snapshot for one Agentforce agent: planner, topics, actions, flows, Apex, prompt templates, and NGA plugins. Renders a human-readable arch5.9Kskills.sh installs
3forcedotcom avataragentforce-testforcedotcom/sf-skillsWrite, run, and analyze structured test suites for Agentforce agents — functional AND security. TRIGGER when: user writes or modifies test spec YAML (AiEvaluati5.8Kskills.sh installs
4affaan-m avatarsecurity-scanaffaan-m/eccScan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.m5.8Kskills.sh installs
5aws avataramazon-aurora-mysqlaws/agent-toolkit-for-awsAmazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel query). Trigger5.7Kskills.sh installs
6trailofbits avatarsecond-opiniontrailofbits/skillsRuns external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific commits. Use when the user asks for a secon5.6Kskills.sh installs