resilience-hub-getting-started

Configures AWS Resilience Hub v2 policies, services, and failure mode assessments.

2.5k|282|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/aws/agent-toolkit-for-aws --skill resilience-hub-getting-started
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: resilience-hub-getting-started
Source: https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/resilience-skills/resilience-hub-getting-started
Command: npx skills add https://github.com/aws/agent-toolkit-for-aws --skill resilience-hub-getting-started

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Setting up AWS Resilience Hub v2 for the first time involves many ordered API calls — creating resilience policies with SLO targets, registering systems and user journeys, onboarding services with input sources, and running failure mode assessments — and mistakes in sequencing or parameters cause failed assessments and confusing errors.

Core Features & Use Cases

  • Guided end-to-end setup: Walks through a 10-step procedure covering policy creation with availability/RTO/RPO targets, system and user journey registration, service onboarding with invoker IAM roles, and input source configuration (CloudFormation stacks, resource tags, Terraform state, or EKS clusters).
  • Failure mode assessment execution: Starts asynchronous assessments, polls for completion, and presents findings grouped by severity with recommendations from the SEEMS failure-category framework.
  • Security guardrails: Enforces least-privilege invoker roles, confused-deputy condition keys, and SSE-KMS/TLS recommendations for Terraform state and report S3 buckets.
  • Use Case: A platform engineer wants to onboard a tier-1 checkout service with a 99.99 availability SLO and 5-minute RTO, then run a first failure mode assessment to see whether the architecture can meet those targets.

Quick Start

Ask the agent to set up AWS Resilience Hub v2 for your service with a specific availability target, RTO/RPO values, and an input source such as a CloudFormation stack ARN.

Frequently Asked Questions about resilience-hub-getting-started

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get started with AWS Resilience Hub v2?

Follow the guided setup procedure: create a resilience policy with availability and RTO/RPO targets, create a system and user journey, register your service with an invoker IAM role, add input sources, then start a failure mode assessment. Each step maps to a specific resiliencehubv2 CLI command.

How do I create a resilience policy with availability and RTO targets?

Run aws resiliencehubv2 create-policy with --availability-slo target=<percent>, --multi-az rtoInMinutes/rpoInMinutes/disasterRecoveryApproach, and optionally --multi-region targets. Availability can be any value between 0 and 100, such as 99.9, 99.95, or 99.99.

What input sources does Resilience Hub v2 support for resource discovery?

Resilience Hub v2 supports four input source types: CloudFormation stack ARNs, resource tag key/value pairs, Terraform state files in S3, and EKS clusters with namespaces. At least one input source must be added before running an assessment.

Why is my Resilience Hub assessment stuck in IN_PROGRESS?

Assessments run asynchronously and typically take around 10 minutes, longer for large services. If stuck over 30 minutes, poll list-failure-mode-assessments and check the errorCode field — common causes are INVALID_PERMISSIONS or CMK_ACCESS_DENIED on cross-account roles.

What does NOT_ACHIEVABLE achievability mean in Resilience Hub?

NOT_ACHIEVABLE means the current architecture cannot meet the policy's SLO targets. You must make infrastructure changes such as adding redundancy or multi-region deployment before testing; running FIS experiments will not help an insufficient architecture.

Does this skill cover FIS experiments or ARC routing controls?

No. The skill covers Resilience Hub v2 setup, policies, service onboarding, and failure mode assessments only. AWS Fault Injection Service experiments and Application Recovery Controller routing controls are explicitly out of scope.