skills.rest
UnionStreetAI
UnionStreetAIOFFICIAL
Explore all skills by this author →
GitHub

aws-cli

Inspect and operate AWS resources using the AWS CLI with account-aware safeguards.

Updated May 6, 2026
Search Tags:#aws#cli#cloud#diagnostics#s3#lambda#cloudwatch
One-click install
npx skills add https://github.com/UnionStreetAI/unionstreet --skill aws-cli-unionstreetai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-cli
Source: https://github.com/UnionStreetAI/unionstreet/tree/main/plugins/aws/skills/aws-cli
Command: npx skills add https://github.com/UnionStreetAI/unionstreet --skill aws-cli-unionstreetai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Running AWS commands without knowing which account, region, or profile is active leads to mistakes against the wrong environment. This Skill enforces account-aware, read-only-first usage of the AWS CLI for safe cloud inspection and operations. ## Core Features & Use Cases - Identity and Configuration Checks: Verify the active account, region, and profile with aws sts get-caller-identity and aws configure list before any operation. - Resource Inspection: List and inspect S3 buckets, CloudFormation stacks, ECS clusters, Lambda functions, and CloudWatch log groups. - Log Diagnostics: Tail CloudWatch logs in follow mode for live troubleshooting of services. - Use Case: When debugging a failing deployment, confirm the correct account and region, describe the relevant CloudFormation stack, and tail the application's log group to find the error. ## Quick Start Use the AWS CLI to confirm the current account and region, then tail the CloudWatch logs for my service.

Frequently Asked Questions about aws-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check which AWS account and region I am using?▼

Run `aws sts get-caller-identity` to see the active account and `aws configure get region` for the configured region. The Skill requires naming the account, region, and profile in every summary to avoid operating in the wrong environment.

How to tail CloudWatch logs with the AWS CLI?▼

Use `aws logs tail <group> --follow` to stream a log group in real time. First run `aws logs describe-log-groups` to find the exact log group name for your service.

Can I use a specific AWS profile and region per command?▼

Yes, pass `--profile` and `--region` flags on individual commands instead of relying on ambient configuration. This is the preferred approach to ensure operations target the intended account and region.

What AWS operations require confirmation before running?▼

Any mutation of IAM, networking, databases, or production workloads requires asking first. Read-only inspection commands like listing S3 buckets or describing stacks can run without confirmation.

Why should secrets and access keys never be printed?▼

Printing access keys, session tokens, or full environment dumps exposes credentials in logs and transcripts. The Skill explicitly forbids outputting secrets to prevent credential leakage during diagnostics.

Related Skills

Explore More Software Engineering Skills→
herren-officialherren-official

b2c-backend-aws-mfa

Refresh AWS MFA session tokens and update the default credentials file.

Official
Advanced
incidentfoxincidentfox
656

aws-infrastructure

Inspect EC2, ECS, Lambda, and CloudWatch resources to investigate AWS infrastructure issues.

Official
Intermediate
TrogonStackTrogonStack
10

datadog-design-dashboard

Design and audit Datadog dashboard layouts for operational readiness.

Official
Advanced
AradotsoAradotso
5

iac-data-engineering-terraform

Automate AWS data engineering infrastructure with Terraform for S3, EC2, and IAM.

Official
Advanced