aws-vpc-design

Design secure, scalable AWS VPCs with multi-AZ subnets and NAT gateways.

2|Updated Nov 18, 2025
One-click install
npx skills add https://github.com/pluginagentmarketplace/custom-plugin-aws --skill aws-vpc-design
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-vpc-design
Source: https://github.com/pluginagentmarketplace/custom-plugin-aws/tree/main/skills/aws-vpc-design
Command: npx skills add https://github.com/pluginagentmarketplace/custom-plugin-aws --skill aws-vpc-design

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Designing secure, scalable AWS VPCs to support multi-AZ deployments and complex network layouts without manual, error-prone configurations.

Core Features & Use Cases

  • VPC planning & CIDR strategy: Plan address space and subnet layouts for public, private, and database tiers.
  • Security & compliance: Enforce best practices like segmented subnets, flow logs, security groups, and NACLs.
  • Deployment patterns: Multi-AZ architectures with Internet/NAT gateways, VPN/DirectConnect options, and routing configurations.
  • Use Case: Create a production VPC for a multi-tier application with public load balancers and private app/services subnets.

Quick Start

Design a production-grade AWS VPC with multi-AZ subnets, NAT gateways, and security best practices.

Frequently Asked Questions about aws-vpc-design

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design an AWS VPC for multi-AZ deployments with public and private subnets?

To design an AWS VPC for multi-AZ deployments, plan your CIDR address space and allocate public, private, and database subnets across availability zones, then configure routing tables and NAT gateways to isolate private tier traffic.

What is the best way to plan CIDR blocks and subnet schemes for AWS network architecture?

The best way to plan CIDR blocks and subnet schemes is to segment address space by tier, reserving separate ranges for public, private, and database subnets across multiple availability zones to ensure scalable AWS network architecture.

How do I configure security controls like NACLs and flow logs in an AWS VPC?

To configure security controls in an AWS VPC, apply network ACLs for subnet-level traffic filtering, establish security groups for instance-level isolation, and enable VPC flow logs to capture network traffic for compliance auditing.

Can I use this VPC design approach for VPN and DirectConnect network topologies?

Yes, this VPC design approach supports complex network topologies with VPN and DirectConnect connectivity options, allowing integration of on-premises networks alongside multi-AZ public and private subnet routing configurations.

Do I need pyyaml to automate AWS VPC subnet allocation and gateway configurations?

Yes, the pyyaml dependency is required to parse YAML configurations that define VPC subnet allocation schemes, gateway setups, and routing logic, enabling automated generation of secure AWS network architectures.