aws

Guide secure AWS infrastructure design across IAM, S3, Lambda, EC2, and VPC.

19|6|Updated Sep 13, 2025
One-click install
npx skills add https://github.com/neverinfamous/memory-journal-mcp --skill aws-neverinfamous
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws
Source: https://github.com/neverinfamous/memory-journal-mcp/tree/main/skills/aws
Command: npx skills add https://github.com/neverinfamous/memory-journal-mcp --skill aws-neverinfamous

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Production-grade AWS infrastructure guidance to design, deploy, and manage secure, scalable systems with best-practice controls.

Core Features & Use Cases

  • PoLP and IAM best practices to minimize permissions and avoid wildcard actions.
  • Secrets management, encryption, and S3 security to protect data at rest and in transit.
  • Infrastructure as Code guidance for Terraform, CloudFormation, and CDK with repeatable, auditable deployments.

Quick Start

Provide your AWS deployment target and goals to receive tailored best-practice guidance.

Frequently Asked Questions about aws

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce least-privilege IAM permissions in AWS to avoid wildcard actions?

To enforce least-privilege IAM in AWS, apply policies that grant only the specific actions and resources required, avoiding wildcard actions. This approach minimizes permissions and reduces security risks.

What is the best way to manage secrets and encryption for S3 data at rest and in transit?

The best way to manage S3 encryption and secrets is to implement strict secrets management and encryption controls. This protects data at rest and in transit while meeting security compliance standards.

How do I deploy immutable AWS infrastructure using Terraform or CloudFormation?

To deploy immutable AWS infrastructure using Terraform or CloudFormation, define resources through Infrastructure as Code. This enables repeatable, auditable deployments that satisfy immutable infrastructure practices.

Does this AWS infrastructure guidance apply to CDK and Lambda deployments?

Yes, this AWS infrastructure guidance applies to CDK and Lambda deployments. It provides tailored best-practice controls for serverless compute and Infrastructure as Code workflows across multiple deployment tools.

How do I harden VPC and EC2 network security for production AWS environments?

To harden VPC and EC2 network security in AWS production environments, apply network hardening standards. This secures your cloud infrastructure by controlling traffic and isolating resources effectively.