aws-govcloud

Guide partition-aware CDK workflows for AWS GovCloud deployments.

3|Updated Feb 25, 2026

Search Tags:#security #aws #cdk #partition #fips #govcloud #arn

Ready to run

npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill aws-govcloud

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-govcloud
Source: https://github.com/Basilisk-Systems/claude-toolkit/tree/main/skills/aws-govcloud
Command: npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill aws-govcloud

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AWS GovCloud requires partition-aware CDK patterns and careful endpoint usage to ensure compliant deployments across GovCloud regions. This skill provides guidance on using partition tokens, GovCloud ARN formats, and FIPS endpoints to avoid hardcoded commercial AWS references and misconfigurations.

Core Features & Use Cases

Partition-aware CDK usage: use Aws.PARTITION, Aws.REGION, and Aws.ACCOUNT_ID to generate ARNs and resource identifiers without hardcoding "arn:aws".
GovCloud networking and endpoints: patterns for S3, DynamoDB, STS, and other services with FIPS endpoints and GovCloud regional considerations.
Deployment, testing, and compliance: guidance for environment configuration, CDK context, and GovCloud validation tests.

Quick Start

Configure your GovCloud project with partition-aware CDK patterns and FIPS endpoints to enable compliant deployments.

Frequently Asked Questions about aws-govcloud

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate GovCloud ARNs in CDK without hardcoding commercial AWS partitions?▼

To generate GovCloud ARNs in CDK without hardcoding, use partition-aware CDK properties like Aws.PARTITION, Aws.REGION, and Aws.ACCOUNT_ID. This ensures your constructs dynamically resolve to the correct GovCloud partition instead of defaulting to commercial AWS references.

What FIPS endpoints do I need for AWS GovCloud CDK deployments?▼

AWS GovCloud CDK deployments require FIPS endpoints for services like S3, DynamoDB, and STS. Using FIPS endpoints ensures compliant network traffic routing across us-gov regions, avoiding commercial AWS endpoint misconfigurations.

Why does my CDK stack fail when deploying to AWS GovCloud regions?▼

CDK stack deployments to AWS GovCloud fail when constructs use hardcoded commercial AWS ARN patterns. Resolve this by applying partition-aware CDK tokens and configuring the correct GovCloud environment context.

Does AWS CDK support FedRAMP compliance and GovCloud service availability checks?▼

AWS CDK supports FedRAMP compliance by enforcing partition-aware configurations for GovCloud service availability. This skill guides correct environment setup and validation tests across us-gov regions to maintain compliance.

Can I use standard CDK constructs for GovCloud networking and endpoint configuration?▼

Standard CDK constructs can be used for GovCloud networking and endpoint configuration by applying partition-aware properties. You must configure FIPS endpoints and GovCloud regional context to ensure compliant deployments.