aws-infra

Discover AWS resources across accounts using read-only AWS CLI commands.

2|Updated Jun 29, 2021
One-click install
npx skills add https://github.com/pypeaday/dotfiles --skill aws-infra
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-infra
Source: https://github.com/pypeaday/dotfiles/tree/main/opencode/.config/opencode/skill/aws-infra
Command: npx skills add https://github.com/pypeaday/dotfiles --skill aws-infra

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables read-only discovery of AWS resources across multiple accounts using the AWS CLI, helping teams inventory and audit cloud infrastructure without making changes.

Core Features & Use Cases

  • Safe, read-only queries for common resources such as EC2 instances, S3 buckets, IAM roles, VPCs, Lambda functions, and more.
  • Multi-account discovery by switching AWS CLI profiles to aggregate inventory across accounts.
  • Practical use cases include auditing resource ownership, verifying configurations, and generating inventories for security reviews.

Quick Start

Verify your identity, then list a few resources with simple commands:

  • aws sts get-caller-identity
  • aws ec2 describe-instances --region us-east-1
  • aws s3 ls

Frequently Asked Questions about aws-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inventory AWS resources across multiple accounts safely?

You can inventory AWS resources across multiple accounts safely by using read-only AWS CLI commands like describe, list, and get while switching between AWS profiles to aggregate discovery data without risking destructive changes.

Can I audit EC2, S3, and IAM configurations without making changes?

Yes, you can audit EC2, S3, IAM, VPC, and Lambda configurations without making changes by executing safe, read-only AWS CLI queries that strictly prevent destructive actions during the cloud audit process.

What is the best way to perform a read-only cloud audit using AWS CLI?

The best way to perform a read-only cloud audit using AWS CLI is to verify your identity with aws sts get-caller-identity, then use describe, list, and get commands to discover resources across configured AWS profiles.

Do I need AWS CLI profiles configured for multi-account infrastructure discovery?

Yes, you need AWS CLI profiles configured for multi-account infrastructure discovery because switching profiles is the mechanism used to aggregate inventory and audit resources across different AWS accounts.

Does this AWS infrastructure discovery approach support modifying resources?

No, this AWS infrastructure discovery approach does not support modifying resources because it is explicitly designed to satisfy safe, read-only queries and prevent destructive actions during multi-account audits.