skills.rest
github
githubOFFICIAL
Explore all skills by this author →
WebsiteGitHub

aws-well-architected-review

Reviews AWS infrastructure-as-code against the Well-Architected Framework and generates GitHub issues for findings.

38.5k|4.9k|Updated Jun 11, 2025
Search Tags:#AWS#security review#terraform#cloud audit#gitHub issues#Well-Architected#Infrastructure-as-Code
One-click install
npx skills add https://github.com/github/awesome-copilot --skill aws-well-architected-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-well-architected-review
Source: https://github.com/github/awesome-copilot/tree/main/skills/aws-well-architected-review
Command: npx skills add https://github.com/github/awesome-copilot --skill aws-well-architected-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually auditing AWS infrastructure against the Well-Architected Framework is time-consuming and error-prone, and findings often get lost without a tracking mechanism. This Skill automates the review of your IaC and live AWS resources across all 6 WAF pillars and turns every finding into a tracked GitHub issue.

Core Features & Use Cases

  • Six-Pillar Review: Systematically checks Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability against Terraform, CloudFormation, CDK, and SAM files.
  • Risk Classification: Classifies each finding as High, Medium, or Low risk with concrete IaC remediation snippets and AWS CLI fallbacks.
  • GitHub Issue Tracking: Creates individual labeled issues per finding plus an EPIC issue with a pillar breakdown table and Mermaid architecture diagram.
  • Use Case: Before a production launch, run the review against your Terraform repository to surface security gaps like unencrypted S3 buckets or overly permissive IAM policies, then track remediation through automatically created GitHub issues.

Quick Start

Ask the agent to perform an AWS Well-Architected Framework review of this repository's infrastructure code and create GitHub issues for the findings.

Frequently Asked Questions about aws-well-architected-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an AWS Well-Architected review on my Terraform code?▼

Invoke the skill in a repository containing Terraform files with AWS CLI authenticated. It scans all .tf files, checks them against the six WAF pillars, classifies findings by risk, and creates GitHub issues after your confirmation.

What IaC formats does the AWS Well-Architected review support?▼

The review supports Terraform (.tf), CloudFormation and SAM templates (YAML/JSON), and AWS CDK projects (TypeScript with cdk.json). If no IaC files are found, it falls back to reviewing live resources via AWS CLI.

What prerequisites are needed for the AWS architecture review?▼

You need the AWS CLI configured and authenticated, IaC files present in the repository, and a GitHub MCP server configured for issue creation. Read-only AWS permissions are sufficient for the review.

What happens if GitHub issue creation fails during the review?▼

If GitHub issue creation fails, the skill outputs all findings as formatted markdown to the console instead. You still receive the full risk-classified findings with remediation steps and AWS documentation references.

How are findings classified in a Well-Architected review?▼

Findings are classified into three risk levels: High for security vulnerabilities and single points of failure, Medium for reliability or cost concerns, and Low for best-practice deviations. Each finding maps to a specific WAF pillar and question.

Related Skills

Explore More Software Engineering Skills→
aws-samplesaws-samples
12

security-review

Audit AWS infrastructure code for security misconfigurations and remediation guidance.

Official
Intermediate
learntocloudlearntocloud
738

ship-it

Run pre-commit checks, stage, commit, push, and monitor deployment.

Official
Advanced
withmartian-sandboxwithmartian-sandbox

ops-security-audit

Audit infrastructure security with automated scanners and compliance mapping.

Official
Advanced
naporin0624naporin0624
3

iac-scanner

Detect security misconfigurations in Infrastructure as Code using tfsec and Checkov.

Community
Advanced