aws-vpc

Design and provision AWS VPCs with subnets, routing, and security groups.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/ToanPV90/dotfiles --skill aws-vpc-toanpv90
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-vpc
Source: https://github.com/ToanPV90/dotfiles/tree/main/agents/.agents/skills/aws-vpc
Command: npx skills add https://github.com/ToanPV90/dotfiles --skill aws-vpc-toanpv90

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AWS VPC networking design and setup is difficult and error-prone, especially when you need correct subnet isolation, routing, and security boundaries for production environments.

Core Features & Use Cases

  • VPC, Subnets, and Routing Architecture: Plan and create public, private, and isolated data subnets with appropriate route tables, including NAT Gateway-based outbound for private tiers.
  • Security Controls: Define security groups for common patterns like ALB → App → DB connectivity and diagnose common ingress misconfigurations.
  • Private Service Connectivity & Observability: Add VPC endpoints for private access to AWS services and enable VPC Flow Logs for troubleshooting.

Quick Start

Deploy a production-style VPC layout with public, private, and isolated subnets plus NAT routing, security groups, and S3/DynamoDB endpoints in the specified region using AWS CLI commands.

Frequently Asked Questions about aws-vpc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a multi-tier AWS VPC with public and private subnets?

To set up AWS VPC networking, you plan CIDR blocks for public, private, and isolated subnets, then configure route tables with Internet Gateways and NAT Gateways to manage traffic routing for private tiers.

What's the best way to configure security groups for an ALB to database architecture in AWS?

Configuring security groups for ALB to database architecture requires defining least-privilege ingress and egress rules, allowing traffic from the ALB to application instances, and restricting database access to only application instance ports.

How do I enable private access to AWS services without adding a NAT Gateway?

To enable private access to AWS services without a NAT Gateway, you configure VPC endpoints, allowing private subnets to securely reach S3, DynamoDB, and other services while keeping traffic within the AWS network.

Why is my AWS VPC routing not working for private subnet outbound traffic?

AWS VPC routing for private subnet outbound traffic fails when route tables lack a NAT Gateway target or VPC DNS is not enabled, preventing instances from resolving external endpoints and accessing the internet.

Can I use AWS CLI v2 to provision a complete VPC with flow logging and peering?

Yes, you can use AWS CLI v2 to provision VPCs, subnets, route tables, security groups, VPC peering connections, and optional VPC Flow Logs for troubleshooting and network observability across development or production environments.