About

Imported from shipshitdev/skills (skills/aws-infrastructure/SKILL.md). Install upstream with npx skills add shipshitdev/skills --skill aws-infrastructure. Copyright stays with the author.

AWS Infrastructure Expert

Name: aws-infrastructure
Author: shipshitdev

When to Use

EC2 instance setup and configuration
VPC and networking setup
Security group configuration
Application Load Balancer setup
Route53 DNS configuration
SSL/TLS certificate management (ACM)
Auto-scaling groups
CloudWatch monitoring

EC2 Setup

Instance Types

Development: t3.medium (2 vCPU, 4GB RAM)
Production (small): t3.large (2 vCPU, 8GB RAM)
Production (medium): m5.large (2 vCPU, 8GB RAM)

Storage

Use gp3 SSD volumes
Development: 20GB minimum
Production: 100GB+ based on needs
Enable EBS snapshots for backups

Key Pairs

Generate or import SSH key pairs
Store private keys securely
Use IAM roles instead of access keys when possible

VPC Configuration

Basic Setup

Create VPC with CIDR block (e.g., 10.0.0.0/16)
Create public and private subnets
Set up Internet Gateway
Configure route tables
Set up NAT Gateway for private subnets (if needed)

Subnets

Public subnets: For load balancers, bastion hosts
Private subnets: For application servers, databases
Multi-AZ for high availability

Security Groups

Application Security Group

Inbound:
- HTTP (80) from ALB security group
- HTTPS (443) from ALB security group
- SSH (22) from bastion/your IP only

Outbound:
- All traffic (0.0.0.0/0)

Database Security Group

Inbound:
- MongoDB (27017) from application security group only
- Redis (6379) from application security group only
- SSH (22) from bastion/your IP only

Outbound:
- All traffic (0.0.0.0/0)

Load Balancer Security Group

Inbound:
- HTTP (80) from 0.0.0.0/0
- HTTPS (443) from 0.0.0.0/0

Outbound:
- HTTP (80) to application security group
- HTTPS (443) to application security group

Application Load Balancer

Setup

Create ALB in public subnets
Configure target groups (EC2 instances)
Set up health checks
Configure listeners (HTTP → HTTPS redirect)
Attach SSL certificate from ACM

Health Checks

Path: /health or /api/health
Protocol: HTTP
Port: 3001 (backend) or 3000 (frontend)
Healthy threshold: 2
Unhealthy threshold: 2
Timeout: 5 seconds
Interval: 30 seconds

Route53 DNS

Domain Setup

Create hosted zone for domain
Create A record (alias) pointing to ALB
Create CNAME for www subdomain
Update nameservers at domain registrar

SSL/TLS (ACM)

Request certificate in ACM (us-east-1 for CloudFront/ALB)
Validate via DNS (add CNAME records)
Attach certificate to ALB listener
Certificate auto-renews

CloudWatch Monitoring

Metrics

EC2: CPU, Memory, Disk, Network
ALB: Request count, Target response time, HTTP errors
Custom metrics for application-specific data

Alarms

High CPU utilization
Low disk space
Application errors (via CloudWatch Logs)
Unhealthy target instances

Best Practices

Use IAM roles instead of access keys
Enable CloudTrail for audit logging
Use VPC endpoints for AWS service access
Implement least privilege security groups
Use private subnets for databases
Enable encryption at rest for EBS volumes
Set up automated backups (EBS snapshots)
Monitor costs with AWS Cost Explorer

Integration

This skill integrates with /db-setup for MongoDB on EC2 and /deploy for deployment workflows.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/shipshitdev-skills-aws-infrastructure/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

shipshitdev-skills-aws-infrastructure.ocm.jsonjson

{
  "ocm": "1",
  "id": "shipshitdev-skills-aws-infrastructure",
  "kind": "skill",
  "name": "aws-infrastructure",
  "description": "Expert in AWS infrastructure setup including EC2, VPC, security groups, Application Load Balancers, Route53 DNS, and SSL/TLS certificates. Use this skill for AWS infrastructure configuration and deployment.",
  "publisher": "shipshitdev",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "aws",
      "infrastructure",
      "devops",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Expert in AWS infrastructure setup including EC2, VPC, security groups, Application Load Balancers, Route53 DNS, and SSL/TLS certificates. Use this skill for AWS infrastructure configuration and deployment."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/shipshitdev/skills",
      "path": "skills/aws-infrastructure/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/shipshitdev/skills/blob/HEAD/skills/aws-infrastructure/SKILL.md",
      "key": "shipshitdev/skills/skills/aws-infrastructure/SKILL.md"
    }
  },
  "instructions": "# AWS Infrastructure Expert\n\n## When to Use\n\n- EC2 instance setup and configuration\n- VPC and networking setup\n- Security group configuration\n- Application Load Balancer setup\n- Route53 DNS configuration\n- SSL/TLS certificate management (ACM)\n- Auto-scaling groups\n- CloudWatch monitoring\n\n## EC2 Setup\n\n### Instance Types\n\n- **Development:** t3.medium (2 vCPU, 4GB RAM)\n- **Production (small):** t3.large (2 vCPU, 8GB RAM)\n- **Production (medium):** m5.large (2 vCPU, 8GB RAM)\n\n### Storage\n\n- Use gp3 SSD volumes\n- Development: 20GB minimum\n- Production: 100GB+ based on needs\n- Enable EBS snapshots",
  "cost": {
    "context_tokens": 836
  }
}

Fetch it by URL: GET /api/v1/registry/shipshitdev-skills-aws-infrastructure/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.