Guide AWS architecture design for Lambda, S3, VPC, and IAM best practices.
npx skills add https://github.com/mindmorass/reflex --skill aws-patterns
Please help me install this Agent Skill. Skill: aws-patterns Source: https://github.com/mindmorass/reflex/tree/main/plugins/reflex/skills/aws-patterns Command: npx skills add https://github.com/mindmorass/reflex --skill aws-patterns
This Skill provides practical guidance for architects designing secure, scalable AWS infrastructure using established best practices across core services.
Use the aws-patterns skill to review a Lambda deployment plan and ensure it follows security, networking, and cost-optimization best practices.
High-intent search queries and answers about installing and using this skill.
Design Lambda functions with recommended handler structure, error handling, and observability guidelines. Use least-privilege IAM roles, enable CloudWatch logging, and implement retry logic with exponential backoff to minimize security risks and operational blind spots.
Apply S3 security controls including encryption, versioning, and access policies. Enable server-side encryption, block public access, use bucket policies for least-privilege access, and enable MFA delete to protect data integrity and prevent unauthorized access.
Design multi-subnet VPC layouts with public and private subnets, configure routing tables and network ACLs, and use security groups for traffic isolation. This approach minimizes exposure and ensures workloads communicate only through intended paths.
Apply least-privilege IAM policies that grant only required actions on specific resources. Use policy conditions, resource ARNs, and regular audits to prevent over-permissioning and reduce blast radius if credentials are compromised.
Use cost-aware design patterns across Lambda, S3, and VPC services. Right-size instances, leverage reserved capacity where applicable, configure S3 lifecycle policies, and monitor spending through CloudWatch to balance performance with budget constraints.
ZateGenerate structured security audit reports with findings, severity, and ASVS mappings.
itsmostafaAutomate AWS CloudWatch monitoring setup for logs, metrics, alarms, and dashboards.
jason-c-devConfigures CloudWatch, CloudTrail, AWS Config, and Security Hub across accounts and regions.
Azeem-2Deploy and manage cloud-native infrastructure across multiple providers with IaC and GitOps.
