llms.txt@misc/website/static · diff

git:20261108.0fe0045 to git:20261108.a2ae040

10 added, 8 removed. Audit A to A.

# APEX Skills (Agentic Platform Engineering eXperience)

> Curated AWS skills for AI agents doing platform engineering on AWS, delivered through any coding agent

- Repository: https://github.com/aws-samples/sample-apex-skills

- Documentation: https://aws-samples.github.io/sample-apex-skills/

- License: MIT-0

- Spec: https://agentskills.io

Install with the NPX installer (Claude Code and Kiro CLI):

```

npx apex-skills@1.3.0

```

- For v2 and its `/apex` router, use the manual install from `main`.

+ For the latest skills, including the `/apex` router, use the manual install from `main`.

See https://aws-samples.github.io/sample-apex-skills/docs/getting-started/ for full installation instructions.

Skills on `main`, listed by misc/update-pages.sh; titles and summaries are kept in its SKILL_META table. The same list is on the Skills page (https://aws-samples.github.io/sample-apex-skills/docs/skills/). As JSON: https://aws-samples.github.io/sample-apex-skills/manifests/skills.json

+ For AWS agents, the EKS skills ported to AWS DevOps Agent run autonomously as read-only assessments; give the Agent Space a read-only role: https://aws-samples.github.io/sample-apex-skills/docs/devops-agent/

## EKS skills

- [EKS skills overview](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/): APEX agent skills for Amazon EKS: design, Terraform builds, cluster discovery, operational, cost, security and upgrade reviews, ingress migration and GenAI.

- [eks-best-practices](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-best-practices/): EKS architecture advice: compute, networking, security, reliability, cost, scaling, observability, multi-tenancy, upgrades, hybrid and surge readiness

- [eks-build](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-build/): Generate production-ready EKS Terraform projects with optional ArgoCD GitOps, air-gapped support and 29+ addon configurations

- [eks-cost-intelligence](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-cost-intelligence/): Live EKS cost efficiency assessment across 6 dimensions with a 0-100 Cost Score and dollar-quantified findings

- [eks-design](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-design/): Generate EKS architecture design documents with Mermaid diagrams, ADRs, security architecture and validation reports, guided by Well-Architected practices

- [eks-genai](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-genai/): GenAI and LLM workloads on EKS: GPU vs Trainium/Inferentia, vLLM and Ray serving, distributed training, ML storage and AI gateways

- [eks-ingress-migration](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-ingress-migration/): Assess a live cluster's NGINX/Ingress estate and plan migration to Gateway API, the AWS Load Balancer Controller or AWS Transform

- [eks-mcp-server](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-mcp-server/): Set up and troubleshoot the EKS MCP Server in your AI assistant; for cluster work once MCP works, use eks-recon, eks-operation-review or eks-upgrade-check

- - [eks-operation-review](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-operation-review/): Structured EKS operational excellence assessment across 10 areas, GREEN/AMBER/RED rated, including deprecated-API review with no target version

+ - [eks-operation-review](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-operation-review/): EKS operational excellence assessment across 10 areas, GREEN/AMBER/RED rated, with prioritized recommendations and deprecated-API review with no target version

- [eks-platform-engineering](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-platform-engineering/): Internal Developer Platform design on EKS: Backstage, ArgoCD, Kargo, progressive delivery, golden paths and DORA metrics

- - [eks-recon](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-recon/): EKS cluster discovery: compute, networking, security facts, add-ons, workloads, storage, IaC and CI/CD, reported as facts with no scoring

- - [eks-security](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-security/): Read-only scripted security reviews of a live EKS cluster (CVE exposure, security event response, posture check) plus hardening: CIS, HIPAA, PCI-DSS, FedRAMP

+ - [eks-recon](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-recon/): EKS cluster discovery: compute, networking, security facts, add-ons, workloads, storage, IaC and CI/CD, reported as facts

+ - [eks-security](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-security/): Read-only scripted reviews of a live EKS cluster (CVEs, events, posture); hardening: CIS, HIPAA, PCI-DSS, FedRAMP, SOC 2, GuardDuty, Pod Identity, image signing

- [eks-upgrade-check](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-upgrade-check/): Assess EKS cluster upgrade readiness with a 0-100 score across 8 areas including deprecated APIs, add-on compatibility and workload risks

- - [eks-well-architected-review](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-well-architected-review/): Unofficial Well-Architected style review of a live EKS cluster (Linux nodes only), scored across five pillars; run only on an explicit WAFR request

+ - [eks-well-architected-review](https://aws-samples.github.io/sample-apex-skills/docs/skills/eks/eks-well-architected-review/): Unofficial, deterministic Well-Architected style review of a live EKS cluster (Linux nodes only) across five pillars; run only on an explicit WAFR request

## ECS skills

- [ECS skills overview](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/): APEX agent skills for Amazon ECS: architecture and launch type choice, Terraform builds, deployments and CI/CD, security, operational reviews and GPU workloads.

- - [ecs-architect](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-architect/): Choose the ECS deployment model for a new workload: Fargate, EC2, Managed Instances, Express Mode or ECS Anywhere, capacity providers and task sizing

+ - [ecs-architect](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-architect/): Choose the ECS compute model and launch type for a new workload: Fargate, EC2, Managed Instances, Express Mode or ECS Anywhere, capacity providers and task sizing

- [ecs-build](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-build/): Generate apply-ready Terraform for ECS clusters, services and task definitions on Fargate, EC2 Auto Scaling or Managed Instances

- [ecs-devops](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-devops/): Deploy and release to ECS: blue/green and canary deployments, CI/CD pipelines and rollbacks

- [ecs-genai](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-genai/): GPU, ML and GenAI workloads on ECS: GPU instances, Inferentia, Trainium and Neuron, launch type choice, training and model inference

- [ecs-modernize](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-modernize/): Assess an existing VMware or EC2 app from its source code, decide replatform or rearchitect, and migrate it onto ECS

- [ecs-observability](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-observability/): ECS observability architecture: logs, metrics and traces with CloudWatch, Container Insights, X-Ray, ADOT, Managed Prometheus and Grafana, or FireLens

- [ecs-operation-review](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-operation-review/): Structured ECS operational excellence assessment of a live estate across 8 domains with GREEN/AMBER/RED ratings

- - [ecs-recon](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-recon/): ECS environment discovery: compute and capacity providers, task definitions, deployments, scaling, networking, security, observability and IaC/CI-CD

+ - [ecs-recon](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-recon/): ECS environment discovery: compute and capacity providers, task definitions, scaling, networking, security, observability and IaC/CI-CD

- [ecs-security](https://aws-samples.github.io/sample-apex-skills/docs/skills/ecs/ecs-security/): ECS security and compliance: task and execution roles, iam:PassRole, trust policies, secrets injection and shared responsibility on Fargate and EC2

## General skills

- - [apex](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/apex/): Router for EKS and ECS requests: picks the skill that fits, infers the stage (Day 0 Design, Day 1 Build, Day 2 Operate) and suggests next skills

+ - [apex](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/apex/): Router for EKS and ECS requests: picks the skill that fits, infers the stage (Day 0 Design, Day 1 Build, Day 2 Operate), carries context, suggests next skills

- [dotnet-aws-ecs](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/dotnet-aws-ecs/): Deploy a .NET workload to Amazon ECS Fargate behind an Application Load Balancer, with CloudFormation or CDK and a deployment guide

- [graviton-migration](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/graviton-migration/): Migrate a workload from x86 to AWS Graviton (arm64): arm64 readiness scanning with the Arm migration MCP server, then the Karpenter node cutover on EKS

- [skill-creator](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/skill-creator/): Create new skills, modify existing skills, run evals, benchmark performance and optimize triggering accuracy

- [terraform-skill](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/terraform-skill/): Terraform and OpenTofu: modules, native tests, Terratest, CI/CD pipelines, state debugging and security scanning

- [update-docs](https://aws-samples.github.io/sample-apex-skills/docs/skills/general/update-docs/): Audit and sync all documentation surfaces after skill changes: README markers, Docusaurus site and prose references