kata-aws-review

Review AWS architecture and Infrastructure-as-Code against Lexis and Well-Architected Framework.

Updated Sep 3, 2025
One-click install
npx skills add https://github.com/guardiatechnology/design-system --skill kata-aws-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kata-aws-review
Source: https://github.com/guardiatechnology/design-system/tree/main/.claude/skills/kata-aws-review
Command: npx skills add https://github.com/guardiatechnology/design-system --skill kata-aws-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps teams systematically evaluate an AWS architecture or Infrastructure-as-Code change to uncover security, reliability, cost, and operational gaps against recognized guidance.

Core Features & Use Cases

  • Structured AWS architecture review: Reviews targeted changes or documents step-by-step (Security, IaC, Cost, Reliability, Performance, Operational Excellence) with consistent evidence and severity.
  • Lexis + Well-Architected mapping: Checks specific controls and best practices against defined references (lex-aws-security, lex-aws-iac, lex-aws-cost, and Well-Architected pillars).
  • PR-ready outputs and prioritized remediation: Produces a consolidated Markdown report by severity plus an improvement plan so responsible teams can address findings in a follow-up iteration.

Quick Start

Use this skill to review the AWS architecture for my Terraform or CDK pull request by checking the Security, IaC, Cost, Reliability, Performance, and Operational Excellence pillars and then outputting a severity-structured report with concrete file/resource evidence and recommendations.

Frequently Asked Questions about kata-aws-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review AWS architecture for security and reliability risks in Terraform or CDK code?

Perform a systematic AWS architecture review by checking Terraform, CDK, or CloudFormation changes against the Well-Architected Framework pillars, mapping findings to defined reference controls, and consolidating results into a severity-structured Markdown report with an ordered improvement plan.

Can I run static analysis tools like tfsec or cdk-nag during an AWS architecture review?

Yes, an AWS architecture review can integrate optional static tooling such as tfsec, cdk-nag, and infracost to gather evidence, which is then consolidated with manual checks into a single structured Markdown report for the team.

Does this AWS review process work with CloudFormation changes in pull requests?

Yes, the AWS architecture review process supports CloudFormation changes in pull requests alongside Terraform and CDK, evaluating Security, IaC, Cost, Reliability, Performance, and Operational Excellence pillars to produce PR-ready outputs.

What is the best way to prioritize remediation for AWS Infrastructure-as-Code findings?

Prioritize AWS Infrastructure-as-Code remediation by generating a consolidated report that classifies findings by severity and maps them to Well-Architected Framework references, resulting in an ordered improvement plan for follow-up iterations.

Can I evaluate existing AWS workload inventories or do I need active pull requests?

You can evaluate existing AWS workload inventories without active pull requests, as the architecture review process applies to both IaC changes and existing workload documentation by gathering context and mapping findings to recognized guidance.

What limitations exist when checking AWS IaC changes against the Well-Architected Framework?

The AWS IaC review requires sufficient context gathering from architecture documents or codebases to map findings to Lexis and Well-Architected references, meaning incomplete infrastructure context may limit the evidence-backed severity classification of the final report.