aws-infra

Query AWS resources read-only via AWS CLI across EC2, S3, IAM, Lambda, ECS/EKS, RDS, and CloudWatch.

2|1|Updated Mar 4, 2026

Search Tags:#monitoring #security #aws #audit #infrastructure #billing #aws-cli

Ready to run

npx skills add https://github.com/cncoder/oneclaw --skill aws-infra-cncoder

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-infra
Source: https://github.com/cncoder/oneclaw/tree/main/skills/aws-infra
Command: npx skills add https://github.com/cncoder/oneclaw --skill aws-infra-cncoder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps users query and monitor AWS resources using the AWS CLI with a focus on read-only operations by default and explicit confirmations for any changes.

Core Features & Use Cases

Read-only queries and audits across EC2, S3, IAM, Lambda, ECS/EKS, RDS, and CloudWatch.
On-demand guidance for monitoring, billing queries, and security checks with safe-change prompts.
Use Case: Quickly inventory resources, identify misconfigurations, and propose safe remediation steps after user confirmation.

Quick Start

Start with a read-only inquiry using AWS CLI commands, then request explicit confirmation before any changes.

Frequently Asked Questions about aws-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit AWS resources across multiple services without making accidental changes?▼

You can audit AWS resources safely by running read-only AWS CLI queries across EC2, S3, IAM, and Lambda. The skill enforces a default read-only stance and requires explicit confirmation before executing any write operations or destructive actions.

What is the best way to inventory AWS infrastructure for cost analysis and monitoring?▼

The best way to inventory AWS infrastructure for cost analysis is to use automated AWS CLI queries. This approach gathers billing, CloudWatch, and resource configuration data across services like ECS, EKS, and RDS without modifying your live environment.

Can I use AWS CLI to check IAM security configurations and propose remediation steps?▼

Yes, you can use AWS CLI to check IAM security configurations and identify misconfigurations. The skill performs read-only security audits and proposes safe remediation steps, prompting for explicit user confirmation before applying any changes.

Do I need write access to monitor CloudWatch metrics and billing data with this approach?▼

No, you do not need write access to monitor CloudWatch metrics and billing data. The skill requires only read access by default to perform inventory and monitoring tasks, enforcing confirmation prompts if any write operations become necessary.

How to safely manage AWS EC2 and S3 modifications without risking unintended deletions?▼

To safely manage AWS EC2 and S3 modifications, the skill enforces explicit confirmation prompts before executing any changes. This prevents unintended deletions by ensuring all write operations or destructive actions require manual approval.

What happens if an AWS resource audit identifies a misconfiguration that needs fixing?▼

When an AWS resource audit identifies a misconfiguration, the skill proposes safe remediation steps. It will not apply the fix automatically; it requires explicit user confirmation before executing any write operations to resolve the issue.