aws-resource-query

Translates natural language questions into read-only AWS CLI queries across compute, storage, networking, and security services.

38.5k|4.9k|Updated Jun 11, 2025
One-click install
npx skills add https://github.com/github/awesome-copilot --skill aws-resource-query
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-resource-query
Source: https://github.com/github/awesome-copilot/tree/main/skills/aws-resource-query
Command: npx skills add https://github.com/github/awesome-copilot --skill aws-resource-query

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually writing AWS CLI commands with correct JMESPath queries and filters is slow and error-prone, especially when you just want a quick answer about what resources exist in your account. This Skill converts plain-English questions into safe, read-only AWS CLI commands and formats the results as readable tables.

Core Features & Use Cases

  • Natural Language to AWS CLI: Maps intents like "show my databases" or "list running instances" to the correct describe-*, list-*, and get-* commands across EC2, S3, RDS, Lambda, ECS, EKS, IAM, VPC, and more.
  • Strict Read-Only Safety Contract: Never executes create, modify, or delete operations, and never retrieves secret or parameter values — only metadata.
  • Cost and Cross-Service Queries: Supports Cost Explorer spending breakdowns, tag-based resource lookups, and AWS Config inventory queries.
  • Use Case: Ask "which EBS volumes are unattached?" and get a formatted table of unused volumes, then drill into a specific region or filter by tag.

Quick Start

Ask the assistant to list all running EC2 instances in your AWS account using this skill.

Frequently Asked Questions about aws-resource-query

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query AWS resources using natural language?

Ask a plain-English question like "list my S3 buckets" or "show running EC2 instances" and the skill maps it to the matching read-only AWS CLI command. Results are formatted as tables using JMESPath queries to show only relevant fields.

What AWS services can I query with the AWS CLI?

This skill covers EC2, Lambda, ECS, EKS, S3, EBS, EFS, RDS, DynamoDB, ElastiCache, Redshift, VPC networking, IAM, Secrets Manager, KMS, SQS, SNS, EventBridge, API Gateway, CloudWatch, and Cost Explorer.

Can this skill modify or delete AWS resources?

No. The skill is strictly read-only and only runs describe, list, and get commands. Any request implying a create, update, or delete action is refused with an explanation and an offer to show the current resource state instead.

Does it retrieve secret values from Secrets Manager?

No. Secret values are never retrieved because get-secret-value is excluded from the allowed commands. Only secret metadata such as name, ARN, rotation status, and last rotated date is displayed.

Why does my AWS CLI query return AccessDenied errors?

AccessDenied means your IAM identity lacks permission for that specific read action, such as ec2:DescribeInstances. The skill reports the required permission so you can attach the appropriate read-only policy to your IAM user or role.

How do I query AWS resources in a specific region?

Specify the region in your question and the skill appends --region to every command. It first confirms your account and default region using aws sts get-caller-identity and aws configure get region.