This is a comprehensive AWS reference that covers the full stack: EC2, Lambda, ECS for compute, S3 and EBS for storage, RDS and DynamoDB for databases. It's packed with real CLI commands and code snippets you can actually use, like launching instances with proper tagging, creating Lambda functions with environment variables, setting up ECS task definitions with Fargate, and configuring S3 lifecycle policies. The examples follow AWS best practices around security, encryption, and the Well-Architected Framework. It requires AWS CLI 2.0 or higher and gives Claude bash access to run AWS commands directly. If you're doing cloud infrastructure work and want Claude to know its way around AWS without having to explain everything, this is the skill to load.

skills.sh installs
226
GitHub stars
44
last updated
Aug 21, 2026

Install

$ npx -y skills add personamanagmentlayer/pcl --skill aws-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS Expert

You are an expert in AWS (Amazon Web Services) with deep knowledge of cloud architecture, core services, security, cost optimization, and production operations. You design and manage scalable, reliable, and cost-effective AWS infrastructure following AWS Well-Architected Framework principles.

Best Practices

1. Use IAM Roles (Not Access Keys)

# For EC2 instances
aws ec2 run-instances \
    --iam-instance-profile Name=my-role \
    ...

# For Lambda
aws lambda create-function \
    --role arn:aws:iam::123456789012:role/lambda-role \
    ...

2. Enable MFA

# Require MFA for sensitive operations
{
  "Effect": "Deny",
  "Action": "*",
  "Resource": "*",
  "Condition": {
    "BoolIfExists": {"aws:MultiFactorAuthPresent": "false"}
  }
}

3. Use VPC and Security Groups

# Launch resources in private subnets
# Use NAT Gateway for outbound internet access
# Implement least-privilege security groups

4. Enable Encryption

# S3 encryption
--server-side-encryption AES256

# EBS encryption
--encrypted

# RDS encryption
--storage-encrypted

5. Implement Backup Strategy

Sponsors

Details

Repository
github.com/personamanagmentlayer/pcl
Categories
Security, Code Review & Quality, Cloud & Infrastructure
First seen
Jun 3, 2026

More from personamanagmentlayer/pcl

All 99

Recommended

More Security
1futuregerald avataradonisjs-best-practicesfuturegerald/futuregerald-claude-pluginUse when building AdonisJS v6 applications, implementing features in AdonisJS, or reviewing AdonisJS code. Covers routing, controllers, validation, authenticati216skills.sh installs
2get-convex avatarauth-setupget-convex/convex-agent-pluginsSet up Convex authentication with proper user management, identity mapping, and access control patterns. Use when implementing auth flows.214skills.sh installs
3davila7 avatartwilio-communicationsdavila7/claude-code-templatesBuild communication features with Twilio: SMS messaging, voice calls, WhatsApp Business API, and user verification (2FA). Covers the full spectrum from simple n213skills.sh installs
4get-convex avatarfunction-creatorget-convex/convex-agent-pluginsCreate Convex queries, mutations, and actions with proper validation, authentication, and error handling. Use when implementing new API endpoints.209skills.sh installs
5yonatangross avataraudit-fullyonatangross/orchestkitSingle-pass codebase analysis leveraging a 1M-token context window for comprehensive security scanning, architecture review, and dependency auditing. Loads enti206skills.sh installs
6davila7 avatarslack-bot-builderdavila7/claude-code-templatesBuild Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event hand205skills.sh installs