aws SKILL.md skillA

This file is byte-identical to the first copy the registry indexed. Same content hash, so the same checks give both the same grade.

aws from nitinjain999/platform-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add nitinjain999/platform-skills/aws@git:20261018.90b97a9

Pins git:20261018.90b97a9 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
nitinjain999/platform-skills
Path
plugins/platform-skills/skills/aws/SKILL.md
Versions recorded
1
Latest version
git:20261018.90b97a9, committed Oct 18, 2026
Size
16,186 bytes
Repository stars
70
License
Apache-2.0

Structured guidance for AWS CloudFront distributions, WAF web ACLs, Lambda@Edge, CloudFront Functions, Firewall Manager multi-account enforcement, and IAM/IRSA patterns. Covers OAC, cache policies, security headers, managed rule groups, rate limiting, FMS FIRST/MIDDLE/LAST ownership model, and production-ready Terraform generation.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# AWS Command

Structured guidance for AWS CloudFront, WAF, Lambda@Edge, and multi-account security patterns.

## Interactive Wizard (fires when no mode is provided)

When invoked with no arguments, ask before proceeding:

**Q1 — Mode?**
```
What do you need?
  1. cloudfront   — distributions, OAC, cache policies, security headers, Lambda@Edge
  2. waf          — web ACLs, managed rule groups, rate limiting, false positive tuning
  3. lambda-edge  — CloudFront Functions vs Lambda@Edge, viewer/origin events
  4. multi-account — Firewall Manager, cross-account OAC, FMS WAF enforcement
  5. orgs         — Organizations, SCPs, OU design, account vending, Control Tower
  6. review       — production-readiness review of CloudFront + WAF config
  7. terraform    — generate a Terraform module scaffold

Enter 1–7 or mode name:
```

**Q2 — Context** (after mode selected):
- **cloudfront**: `Describe the issue or what you want to build (distribution, OAC, cache, edge function):`
- **waf**: `Describe the use case — new WebACL, false positive, adding a rule, or multi-account enforcement:`
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add nitinjain999/platform-skills/aws@sha256:87be6f5ccd56caaf

The line at the top of this page pins the label git:20261018.90b97a9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_kmawobkbkbbhrra5.svg)](https://markdownregistry.com/a/art_kmawobkbkbbhrra5)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 18, 2026.

versioncommittedcommitsizeaudit
git:20261018.90b97a9 latest2026-10-18 90b97a9 16,186 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (16186 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

nitinjain999/platform-skills · 70 stars · license Apache-2.0 · pushed 2026-10-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_kmawobkbkbbhrra5
GET https://markdownregistry.com/api/v1/resolve?ref=nitinjain999/platform-skills/aws
GET https://markdownregistry.com/api/v1/blob/87be6f5ccd56caafe7ac37fa688f617c9ba1fc1ff06871946198f375fccf48ee

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from nitinjain999/platform-skills

keda Cursor rule
nitinjain999/platform-skills · .cursor/rules/keda.mdc · KEDA ScaledObject and ScaledJob generation rules — auth patterns, scaling safety, best practices
git:20260516.afdf992 · audit A · 70 stars
kubernetes Cursor rule
nitinjain999/platform-skills · .cursor/rules/kubernetes.mdc · Kubernetes and OpenShift workload generation rules — security defaults, resource limits, probes
git:20261011.38d4a57 · audit A · 70 stars
platform-skills Cursor rule
nitinjain999/platform-skills · .cursor/rules/platform-skills.mdc · Platform engineering rules — applies to all files in this workspace
git:20260926.20dcf68 · audit A · 70 stars
terraform Cursor rule
nitinjain999/platform-skills · .cursor/rules/terraform.mdc · Terraform module and resource generation rules — blast radius, IAM least privilege, SOC 2 defaults
git:20260516.215750b · audit A · 70 stars
.cursorrules Cursor rule
nitinjain999/platform-skills · .cursorrules
git:20260926.20dcf68 · audit A · 70 stars
code-review SKILL.md skill
nitinjain999/platform-skills · .github/skills/code-review/SKILL.md · Review pull requests to this repo (a Claude Code / Copilot / Cursor platform-engineering skill plugin) for technical…
git:20261017.2bd2bff · audit A · 70 stars
CLAUDE.md CLAUDE.md file
nitinjain999/platform-skills · CLAUDE.md
git:20260927.869b173 · audit A · 70 stars
platform-skills SKILL.md skill
nitinjain999/platform-skills · SKILL.md · Use when troubleshooting, implementing, reviewing, or auditing platform infrastructure as a system — where Kubernetes…
git:20260927.df75e5b · audit A · 70 stars
ai-governance SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/ai-governance/SKILL.md · Generate and enforce policy gates for AI coding agents (Copilot, Claude Code) — real-time session hooks that deny…
git:20261018.5f00d39 · audit A · 70 stars
awesome-docs SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/awesome-docs/SKILL.md · Generate, convert, and maintain animated GitHub-safe Markdown documents with animated SVG diagrams. Covers four SVG…
git:20261018.90b97a9 · audit A · 70 stars
aws-profile SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/aws-profile/SKILL.md · AWS profile management for MCP servers — discover profiles across SSO, Granted, and assumed-role chains, check…
git:20261018.90b97a9 · audit B · 70 stars
azure SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/azure/SKILL.md · Azure identity (Workload Identity, OIDC, Entra ID), resource tagging, AKS platform patterns, RBAC scoping, and…
git:20261018.90b97a9 · audit A · 70 stars

Every file in nitinjain999/platform-skills

Other files named aws

aws SKILL.md skill
nitinjain999/platform-skills · skills/aws/SKILL.md · Structured guidance for AWS CloudFront distributions, WAF web ACLs, Lambda@Edge, CloudFront Functions, Firewall Manager…
git:20261011.e8166a5 · audit A · 70 stars
aws SKILL.md skill
fmind/dot · skills/aws/SKILL.md · Operate AWS accounts and SSO profiles with aws and aws-sso-util.
git:20261007.fbd724a · audit A · 12 stars
aws SKILL.md skill
dhaupin/vant · models/public/vant/skills/vant-skill-aws/SKILL.md · Amazon cloud services.
v1.0 · audit A · 12 stars
aws SKILL.md skill
vanducng/skills · skills/aws/SKILL.md · Operate AWS accounts and services with the AWS CLI using identity-first, read-before-write, evidence-backed workflows…
v0.1.1 · audit A · 8 stars

Browse by kind, by grade A, or by owner.