aws-infrastructure

Generate secure AWS infrastructure patterns for deploying web applications.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/mefardales/skillbox --skill aws-infrastructure
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-infrastructure
Source: https://github.com/mefardales/skillbox/tree/main/skills/devops/aws-infrastructure
Command: npx skills add https://github.com/mefardales/skillbox --skill aws-infrastructure

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides battle-tested patterns and configurations for building robust, scalable, and secure cloud infrastructure on Amazon Web Services (AWS).

Core Features & Use Cases

  • VPC Design: Establishes secure and segmented network architectures.
  • Compute & Database: Recommends optimal instance types and configurations for EC2, ECS/Fargate, and RDS.
  • Storage & CDN: Implements best practices for S3 bucket security and CloudFront distribution.
  • Security & Access: Enforces least privilege with IAM roles and security groups.
  • Load Balancing & DNS: Configures ALB/NLB and Route 53 for high availability and performance.
  • Monitoring: Sets up CloudWatch alarms for critical metrics and error rates.
  • Use Case: When setting up a new web application on AWS, use this skill to define a secure VPC, provision EC2 instances behind an ALB, configure an RDS database, and set up CloudFront for static assets.

Quick Start

Use the aws-infrastructure skill to generate a secure VPC design with public and private subnets across three availability zones.

Frequently Asked Questions about aws-infrastructure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a secure AWS VPC architecture for a new web application?

To design a secure AWS VPC, you establish segmented network architectures with public and private subnets across multiple availability zones. This creates an isolated network layer that protects your compute resources while routing traffic securely through dedicated load balancers.

What is the best way to provision EC2 instances behind an ALB on AWS?

Provisioning EC2 instances behind an ALB involves configuring compute resources within private VPC subnets and routing external traffic through Application Load Balancers. This setup ensures high availability and distributes network traffic efficiently across your compute instances.

How do I configure S3 bucket security and CloudFront CDN for static assets?

Configuring S3 and CloudFront requires implementing secure S3 bucket policies and creating a CloudFront distribution to serve static assets. This approach restricts direct public access to storage while caching web content globally for faster delivery.

Can I use ECS and Fargate instead of EC2 for my AWS cloud infrastructure?

Yes, you can use ECS and Fargate instead of EC2. The infrastructure patterns recommend optimal instance types and configurations for both EC2 and ECS/Fargate, allowing you to choose serverless compute options for containerized web applications.

Does this AWS infrastructure pattern support RDS databases and Route 53 DNS?

Yes, the AWS infrastructure patterns support both RDS databases and Route 53 DNS. It configures RDS for managed database storage and utilizes Route 53 to manage DNS routing, ensuring high availability and performance for your web application.

How do I set up CloudWatch monitoring for critical AWS infrastructure metrics?

Setting up CloudWatch monitoring involves configuring alarms for critical metrics and error rates across your AWS infrastructure. This provides real-time visibility into VPC networking, compute performance, and database health to maintain operational stability.