aws-best-practices

Guide AWS infrastructure deployments with security and cost optimization best practices.

Updated Feb 12, 2026
One-click install
npx skills add https://github.com/kobogithub/knowledge --skill aws-best-practices-kobogithub
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-best-practices
Source: https://github.com/kobogithub/knowledge/tree/main/skills/aws-best-practices
Command: npx skills add https://github.com/kobogithub/knowledge --skill aws-best-practices-kobogithub

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides guidance and examples for implementing AWS cloud infrastructure best practices, ensuring secure, cost-effective, and well-architected deployments.

Core Features & Use Cases

  • Security Best Practices: Covers IAM, VPC security groups, S3 bucket configurations, and secrets management.
  • Cost Optimization: Offers strategies for right-sizing, using savings plans, and leveraging S3 lifecycle policies.
  • Infrastructure as Code Examples: Includes snippets for ECS Fargate task definitions, Lambda handlers, and CloudWatch alarms.
  • Use Case: A new team is launching a microservice on AWS and needs to ensure it's deployed securely and cost-efficiently. This Skill provides them with actionable configurations for IAM roles, VPC networking, and RDS security.

Quick Start

Use the aws-best-practices skill to generate an IAM policy for read-only access to a specific S3 bucket.

Frequently Asked Questions about aws-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are the best practices for securing AWS IAM roles and S3 buckets?

AWS security best practices emphasize the principle of least privilege for IAM roles and proper S3 bucket configurations. You should implement strict IAM policies, secure network configurations, and use secrets management to protect cloud infrastructure.

How do I optimize AWS infrastructure costs for compute and storage services?

AWS cost optimization involves right-sizing compute resources, leveraging savings plans, and configuring S3 lifecycle policies. These strategies reduce cloud infrastructure expenses while maintaining performance for ECS, Lambda, and RDS deployments.

How do I create a secure CloudWatch alarm and Lambda handler deployment?

Creating a secure Lambda deployment involves using Infrastructure as Code examples for Lambda handlers and CloudWatch alarms. You must apply least privilege IAM execution roles and ensure secure network configurations for your compute resources.

Does this AWS guidance cover networking and architectural patterns for microservices?

Yes, this AWS guidance covers networking and architectural patterns for microservices. It provides actionable VPC configurations, ECS Fargate task definitions, and RDS security setups to ensure teams deploy microservices securely and cost-effectively.

What is the best way to configure data encryption and monitoring in AWS?

The best way to configure data encryption and monitoring in AWS is by applying well-architected deployment patterns. This involves encrypting data, setting up CloudWatch alarms, and enforcing secure network configurations across compute and storage services.