Token导航 LogoToken导航TokenDH.com
开发需要联网github未标认证来源可访问许可证需确认审计通过

aws-solution-architectAWS solution 架构师

Agent Skill

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组,区分本地测试与生产操作;涉及删除资源、重启服务、修改网络或权限配置时,应先确认影响范围。

总安装

2,421

周安装

104

GitHub Stars

103

下载量

849
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:aws-solution-architect(AWS solution 架构师)
来源仓库:https://github.com/borghei/claude-skills
仓库路径:skills/aws-solution-architect
安装命令:
npx skills add https://github.com/borghei/claude-skills --skill aws-solution-architect
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/borghei/claude-skills --skill aws-solution-architect

简介

基于 IaC 模板设计可扩展的 AWS 云架构,支持 Serverless 与容器化部署。

  • 覆盖 Lambda、ECS、RDS 等资源选型与成本估算模型。
  • 输出 CloudFormation/CDK 模板与监控告警配置建议。
  • 部署前务必验证 IAM 权限范围,防止意外删除关键资源。
  • aws-solution-architect 属于开发类 Skill,可作为该场景下的辅助能力补充。

SKILL.md

AWS Solution Architect

Design scalable, cost-effective AWS architectures for startups with infrastructure-as-code templates.


Table of Contents


Trigger Terms

Use this skill when you encounter:

CategoryTerms
Architecture Designserverless architecture, AWS architecture, cloud design, microservices, three-tier
IaC GenerationCloudFormation, CDK, Terraform, infrastructure as code, deploy template
ServerlessLambda, API Gateway, DynamoDB, Step Functions, EventBridge, AppSync
ContainersECS, Fargate, EKS, container orchestration, Docker on AWS
Cost Optimizationreduce AWS costs, optimize spending, right-sizing, Savings Plans
DatabaseAurora, RDS, DynamoDB design, database migration, data modeling
SecurityIAM policies, VPC design, encryption, Cognito, WAF
CI/CDCodePipeline, CodeBuild, CodeDeploy, GitHub Actions AWS
MonitoringCloudWatch, X-Ray, observability, alarms, dashboards
Migrationmigrate to AWS, lift and shift, replatform, DMS

Workflow

Step 1: Gather Requirements

Collect application specifications:

- Application type (web app, mobile backend, data pipeline, SaaS)
- Expected users and requests per second
- Budget constraints (monthly spend limit)
- Team size and AWS experience level
- Compliance requirements (GDPR, HIPAA, SOC 2)
- Availability requirements (SLA, RPO/RTO)

Step 2: Design Architecture

Run the architecture designer to get pattern recommendations:

python scripts/architecture_designer.py --input requirements.json

Select from recommended patterns:

  • Serverless Web: S3 + CloudFront + API Gateway + Lambda + DynamoDB
  • Event-Driven Microservices: EventBridge + Lambda + SQS + Step Functions
  • Three-Tier: ALB + ECS Fargate + Aurora + ElastiCache
  • GraphQL Backend: AppSync + Lambda + DynamoDB + Cognito

See references/architecture_patterns.md for detailed pattern specifications.

Step 3: Generate IaC Templates

Create infrastructure-as-code for the selected pattern:

# Serverless stack (CloudFormation)
python scripts/serverless_stack.py --app-name my-app --region us-east-1

# Output: CloudFormation YAML template ready to deploy

Step 4: Review Costs

Analyze estimated costs and optimization opportunities:

python scripts/cost_optimizer.py --resources current_setup.json --monthly-spend 2000

Output includes:

  • Monthly cost breakdown by service
  • Right-sizing recommendations
  • Savings Plans opportunities
  • Potential monthly savings

Step 5: Deploy

Deploy the generated infrastructure:

# CloudFormation
aws cloudformation create-stack \
  --stack-name my-app-stack \
  --template-body file://template.yaml \
  --capabilities CAPABILITY_IAM

# CDK
cdk deploy

# Terraform
terraform init && terraform apply

Step 6: Validate

Verify deployment and set up monitoring:

# Check stack status
aws cloudformation describe-stacks --stack-name my-app-stack

# Set up CloudWatch alarms
aws cloudwatch put-metric-alarm --alarm-name high-errors ...

Tools

architecture_designer.py

Generates architecture patterns based on requirements.

python scripts/architecture_designer.py --input requirements.json --output design.json

Input: JSON with app type, scale, budget, compliance needs Output: Recommended pattern, service stack, cost estimate, pros/cons

serverless_stack.py

Creates serverless CloudFormation templates.

python scripts/serverless_stack.py --app-name my-app --region us-east-1

Output: Production-ready CloudFormation YAML with:

  • API Gateway + Lambda
  • DynamoDB table
  • Cognito user pool
  • IAM roles with least privilege
  • CloudWatch logging

cost_optimizer.py

Analyzes costs and recommends optimizations.

python scripts/cost_optimizer.py --resources inventory.json --monthly-spend 5000

Output: Recommendations for:

  • Idle resource removal
  • Instance right-sizing
  • Reserved capacity purchases
  • Storage tier transitions
  • NAT Gateway alternatives

Quick Start

MVP Architecture (< $100/month)

Ask: "Design a serverless MVP backend for a mobile app with 1000 users"

Result:
- Lambda + API Gateway for API
- DynamoDB pay-per-request for data
- Cognito for authentication
- S3 + CloudFront for static assets
- Estimated: $20-50/month

Scaling Architecture ($500-2000/month)

Ask: "Design a scalable architecture for a SaaS platform with 50k users"

Result:
- ECS Fargate for containerized API
- Aurora Serverless for relational data
- ElastiCache for session caching
- CloudFront for CDN
- CodePipeline for CI/CD
- Multi-AZ deployment

Cost Optimization

Ask: "Optimize my AWS setup to reduce costs by 30%. Current spend: $3000/month"

Provide: Current resource inventory (EC2, RDS, S3, etc.)

Result:
- Idle resource identification
- Right-sizing recommendations
- Savings Plans analysis
- Storage lifecycle policies
- Target savings: $900/month

IaC Generation

Ask: "Generate CloudFormation for a three-tier web app with auto-scaling"

Result:
- VPC with public/private subnets
- ALB with HTTPS
- ECS Fargate with auto-scaling
- Aurora with read replicas
- Security groups and IAM roles

Input Requirements

Provide these details for architecture design:

RequirementDescriptionExample
Application typeWhat you're buildingSaaS platform, mobile backend
Expected scaleUsers, requests/sec10k users, 100 RPS
BudgetMonthly AWS limit$500/month max
Team contextSize, AWS experience3 devs, intermediate
ComplianceRegulatory needsHIPAA, GDPR, SOC 2
AvailabilityUptime requirements99.9% SLA, 1hr RPO

JSON Format:

{
  "application_type": "saas_platform",
  "expected_users": 10000,
  "requests_per_second": 100,
  "budget_monthly_usd": 500,
  "team_size": 3,
  "aws_experience": "intermediate",
  "compliance": ["SOC2"],
  "availability_sla": "99.9%"
}

Output Formats

Architecture Design

  • Pattern recommendation with rationale
  • Service stack diagram (ASCII)
  • Configuration specifications
  • Monthly cost estimate
  • Scaling characteristics
  • Trade-offs and limitations

IaC Templates

  • CloudFormation YAML: Production-ready SAM/CFN templates
  • CDK TypeScript: Type-safe infrastructure code
  • Terraform HCL: Multi-cloud compatible configs

Cost Analysis

  • Current spend breakdown
  • Optimization recommendations with savings
  • Priority action list (high/medium/low)
  • Implementation checklist

Reference Documentation

DocumentContents
references/architecture_patterns.md6 patterns: serverless, microservices, three-tier, data processing, GraphQL, multi-region
references/service_selection.mdDecision matrices for compute, database, storage, messaging
references/best_practices.mdServerless design, cost optimization, security hardening, scalability

Limitations

  • Lambda: 15-minute execution, 10GB memory max
  • API Gateway: 29-second timeout, 10MB payload
  • DynamoDB: 400KB item size, eventually consistent by default
  • Regional availability varies by service
  • Some services have AWS-specific lock-in

Troubleshooting

ProblemCauseSolution
Lambda cold starts exceed 500msFunction package too large or VPC-attached Lambda without provisioned concurrencyReduce deployment package size, use Lambda layers, enable provisioned concurrency for latency-sensitive endpoints, or move to Fargate for consistent performance
CloudFormation stack stuck in ROLLBACK_IN_PROGRESSResource creation failed mid-deploy and rollback also failed (e.g., non-empty S3 bucket)Check CloudFormation events for the root cause, manually delete the blocking resource, then delete the stack; use DeletionPolicy: Retain for stateful resources
Monthly AWS bill significantly exceeds estimateUntagged resources, forgotten dev/staging environments, or NAT Gateway data transfer costsEnable Cost Explorer, set up AWS Budgets with 50%/80%/100% alerts, run cost_optimizer.py against current inventory, and audit resources with missing tags
DynamoDB throttling errors (ProvisionedThroughputExceededException)Read/write capacity insufficient for traffic spikes, or hot partition keySwitch to on-demand billing mode, redesign partition key for even distribution, or enable DynamoDB Auto Scaling with appropriate min/max settings
API Gateway returns 504 Gateway TimeoutBackend Lambda or integration exceeds the 29-second API Gateway limitOptimize Lambda execution time, offload long tasks to Step Functions or SQS, increase Lambda memory (which also increases CPU), or use asynchronous invocation patterns
Cross-region replication lag causes stale readsDynamoDB Global Tables or Aurora Global Database replication latency under heavy write loadDesign for eventual consistency, route reads to the write-primary region for strong consistency, or use conflict resolution strategies documented in references/architecture_patterns.md
IAM permission denied errors after deploymentLeast-privilege policies missing required actions, or trust policy not updated for new servicesReview CloudTrail logs for denied API calls, add the specific missing actions to the IAM policy, and validate with IAM Policy Simulator before deploying

Success Criteria

  • Cost accuracy: Monthly AWS bill stays within 10% of the architecture estimate produced by cost_optimizer.py.
  • Availability: Production workloads meet or exceed the target SLA (99.9% uptime for three-tier, 99.95% for multi-region).
  • Recovery time: RTO under 4 hours and RPO under 1 hour for all production architectures with disaster recovery configured.
  • Deployment speed: Infrastructure provisioned from generated IaC templates in under 30 minutes for serverless stacks and under 60 minutes for three-tier stacks.
  • Security posture: Zero critical findings in AWS Security Hub within 30 days of deployment; all resources encrypted at rest and in transit.
  • Scaling response: Auto-scaling responds to traffic spikes within 2 minutes, handling 10x baseline load without manual intervention.
  • Operational overhead: Team spends less than 4 hours per week on infrastructure operations after initial deployment.

Scope & Limitations

This skill covers:

  • AWS architecture design for startups and growth-stage companies (serverless, three-tier, microservices, data pipelines, IoT, multi-region patterns)
  • Infrastructure-as-code generation for CloudFormation (SAM), CDK (TypeScript), and Terraform (HCL)
  • Cost analysis, right-sizing recommendations, and Savings Plans evaluation
  • Service selection guidance for compute, database, storage, networking, and security

This skill does NOT cover:

  • Multi-cloud or hybrid-cloud architectures (Azure, GCP) -- see engineering/cloud-migration-specialist/ for cross-cloud strategies
  • Application-level code, business logic, or framework-specific implementation -- see engineering/senior-fullstack/ for fullstack development
  • Compliance audit execution or regulatory evidence collection -- see ra-qm-team/ for SOC 2, HIPAA, GDPR, and ISO compliance skills
  • AWS account management, organization policies, or billing disputes -- see AWS Support or engineering/ms365-tenant-manager/ for tenant administration patterns

Integration Points

SkillIntegrationData Flow
engineering/senior-devopsCI/CD pipeline configuration for deploying generated IaC templatesArchitecture templates flow into DevOps deployment pipelines and monitoring setup
engineering/senior-secopsSecurity hardening of generated architectures (IAM policies, WAF rules, GuardDuty)Architecture design feeds into security review; SecOps findings feed back as architecture constraints
ra-qm-team/soc2-complianceCompliance validation of AWS architectures against SOC 2 Trust Services CriteriaArchitecture resource inventory feeds into compliance audit; audit findings drive architecture changes
engineering/senior-backendBackend service implementation that runs on the designed AWS infrastructureArchitecture patterns define the runtime environment; backend requirements inform service selection
engineering/tech-stack-evaluatorTechnology selection decisions that influence architecture pattern choiceStack evaluation outputs (database, compute, messaging choices) feed into architecture requirements JSON
c-level-advisor/cto-advisorStrategic infrastructure decisions, build-vs-buy, and cloud budget planningCost analysis from cost_optimizer.py informs CTO budget decisions; CTO constraints flow back as architecture requirements

Tool Reference

architecture_designer.py

Purpose: Generates architecture pattern recommendations based on application requirements. Analyzes app type, expected scale, budget, team experience, and compliance needs to recommend the optimal AWS architecture pattern with full service configurations and cost estimates.

Usage:

from scripts.architecture_designer import ArchitectureDesigner

designer = ArchitectureDesigner(requirements)
pattern = designer.recommend_architecture_pattern()
checklist = designer.generate_service_checklist()

Constructor Parameters:

ParameterTypeRequiredDefaultDescription
requirementsdictYes--Dictionary containing all application requirements (see fields below)

Requirements Dictionary Fields:

FieldTypeDefaultDescription
application_typestr"web_application"One of: web_application, mobile_backend, data_pipeline, microservices, saas_platform, iot_platform
expected_usersint1000Expected number of users (or devices for IoT)
requests_per_secondint10Expected peak requests per second
budget_monthly_usdfloat500Maximum monthly AWS budget in USD
team_sizeint3Number of engineers on the team
aws_experiencestr"beginner"Team AWS experience level
compliancelist[]List of compliance frameworks (e.g., ["SOC2", "HIPAA"])
data_size_gbint10Expected data volume in GB

Methods:

MethodReturnsDescription
recommend_architecture_pattern()dictReturns recommended pattern with services, cost estimate, pros/cons, and scaling characteristics
generate_service_checklist()list[dict]Returns phased implementation checklist (Planning, Foundation, Core Services, Security, Monitoring, CI/CD)

Example:

from scripts.architecture_designer import ArchitectureDesigner

requirements = {
    "application_type": "saas_platform",
    "expected_users": 10000,
    "requests_per_second": 100,
    "budget_monthly_usd": 500,
    "team_size": 3,
    "aws_experience": "intermediate",
    "compliance": ["SOC2"],
    "data_size_gb": 50
}

designer = ArchitectureDesigner(requirements)
result = designer.recommend_architecture_pattern()
print(result['pattern_name'])       # "Serverless Web Application"
print(result['estimated_cost'])     # {"monthly_usd": ..., "breakdown": {...}}
print(result['services'])           # Full service stack with configurations

Output Format: Returns a dictionary with keys: pattern_name, description, use_case, services (nested service configurations), estimated_cost (with monthly_usd and breakdown), pros, cons, and scaling_characteristics.

Supported Patterns:

  • Serverless Web Application (< 10k users)
  • Modern Three-Tier Application (10k-100k users)
  • Multi-Region High Availability (100k+ users)
  • Serverless Mobile Backend (mobile app type)
  • Event-Driven Microservices (microservices type)
  • Real-Time Data Pipeline (data pipeline type)
  • IoT Platform (IoT type)

serverless_stack.py

Purpose: Generates production-ready infrastructure-as-code templates for serverless applications. Produces CloudFormation (SAM), CDK (TypeScript), and Terraform (HCL) configurations with API Gateway, Lambda, DynamoDB, Cognito, IAM roles, and CloudWatch logging preconfigured.

Usage:

from scripts.serverless_stack import ServerlessStackGenerator

generator = ServerlessStackGenerator(app_name, requirements)
cfn_template = generator.generate_cloudformation_template()
cdk_stack = generator.generate_cdk_stack()
terraform_config = generator.generate_terraform_configuration()

Constructor Parameters:

ParameterTypeRequiredDefaultDescription
app_namestrYes--Application name (used for resource naming; auto-lowercased, spaces replaced with hyphens)
requirementsdictYes--Dictionary with deployment requirements (see fields below)

Requirements Dictionary Fields:

FieldTypeDefaultDescription
regionstr"us-east-1"AWS region for deployment

Methods:

MethodReturnsDescription
generate_cloudformation_template()strYAML CloudFormation/SAM template with DynamoDB, Lambda, API Gateway, Cognito, IAM, and CloudWatch
generate_cdk_stack()strTypeScript CDK stack with equivalent resources
generate_terraform_configuration()strTerraform HCL configuration with equivalent resources

Example:

from scripts.serverless_stack import ServerlessStackGenerator

generator = ServerlessStackGenerator("my-saas-app", {"region": "us-west-2"})

# Generate CloudFormation template
cfn = generator.generate_cloudformation_template()
with open("template.yaml", "w") as f:
    f.write(cfn)

# Generate CDK stack
cdk = generator.generate_cdk_stack()
with open("lib/stack.ts", "w") as f:
    f.write(cdk)

# Generate Terraform config
tf = generator.generate_terraform_configuration()
with open("main.tf", "w") as f:
    f.write(tf)

Output Format: Each method returns a string containing the full IaC template. Templates include: DynamoDB table (single-table design with PK/SK), Lambda function (Node.js 18.x, 512 MB, 10s timeout), API Gateway (REST, Cognito auth, CORS, throttling), Cognito User Pool (email sign-in, optional MFA), IAM roles (least privilege), and CloudWatch log group (7-day retention). All templates output: API URL, User Pool ID, User Pool Client ID, and Table Name.


cost_optimizer.py

Purpose: Analyzes current AWS resource inventory and spending to generate prioritized cost optimization recommendations. Evaluates compute (EC2, Lambda), storage (S3), databases (RDS, DynamoDB), networking (NAT Gateway, VPC endpoints), and general optimizations (CloudWatch Logs, Elastic IPs, budget alerts).

Usage:

from scripts.cost_optimizer import CostOptimizer

optimizer = CostOptimizer(current_resources, monthly_spend)
analysis = optimizer.analyze_and_optimize()
checklist = optimizer.generate_optimization_checklist()

Constructor Parameters:

ParameterTypeRequiredDefaultDescription
current_resourcesdictYes--Dictionary describing current AWS resources (see fields below)
monthly_spendfloatYes--Current monthly AWS spend in USD

Resources Dictionary Fields:

FieldTypeDescription
ec2_instanceslist[dict]EC2 instances with cpu_utilization (%), pricing ("on-demand" or "reserved")
lambda_functionslist[dict]Lambda functions with memory_mb, avg_memory_used_mb
s3_bucketslist[dict]S3 buckets with name, size_gb, storage_class, has_lifecycle_policy (bool)
rds_instanceslist[dict]RDS instances with name, connections_per_day, monthly_cost, engine, utilization (%)
dynamodb_tableslist[dict]DynamoDB tables with name, billing_mode, read_capacity_units, write_capacity_units, utilization_percentage
nat_gatewayslist[dict]NAT Gateway resources
multi_az_requiredboolWhether multi-AZ NAT is required
vpc_endpointslistExisting VPC endpoints
s3_data_transfer_gbfloatMonthly S3 data transfer volume in GB
cloudwatch_log_groupslist[dict]Log groups with name, retention_days (-1 for never expire), size_gb
elastic_ipslist[dict]Elastic IPs with attached (bool)
has_budget_alertsboolWhether AWS Budgets are configured
has_cost_explorerboolWhether Cost Explorer is enabled

Methods:

MethodReturnsDescription
analyze_and_optimize()dictFull cost analysis with current spend, potential savings, optimized spend, savings percentage, recommendations list, and top 5 priority actions
generate_optimization_checklist()list[dict]Phased action checklist: Immediate (today), This Week, This Month, Ongoing

Example:

from scripts.cost_optimizer import CostOptimizer

resources = {
    "ec2_instances": [
        {"cpu_utilization": 5, "pricing": "on-demand"},
        {"cpu_utilization": 65, "pricing": "on-demand"}
    ],
    "s3_buckets": [
        {"name": "app-assets", "size_gb": 200, "storage_class": "STANDARD", "has_lifecycle_policy": False}
    ],
    "nat_gateways": [{"id": "nat-1"}, {"id": "nat-2"}],
    "multi_az_required": False,
    "has_budget_alerts": False,
    "has_cost_explorer": False
}

optimizer = CostOptimizer(resources, monthly_spend=3000)
result = optimizer.analyze_and_optimize()

print(f"Current spend: ${result['current_monthly_spend']}")
print(f"Potential savings: ${result['potential_monthly_savings']}")
print(f"Savings: {result['savings_percentage']}%")
for rec in result['priority_actions']:
    print(f"  [{rec['priority']}] {rec['service']}: {rec['recommendation']}")

Output Format: analyze_and_optimize() returns a dictionary with keys: current_monthly_spend (float), potential_monthly_savings (float), optimized_monthly_spend (float), savings_percentage (float), recommendations (list of dicts with service, type, issue, recommendation, potential_savings, priority), and priority_actions (top 5 high-priority recommendations sorted by savings).

适合场景

01

用户想查找某类 Agent Skill 时

02

需要根据任务场景推荐可安装能力包时

03

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明,方便继续核验

能力 4

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

38.64%
按下载量换算328

Claude

30.43%
按下载量换算258

Cursor

18.84%
按下载量换算160

Gemini CLI

9.4%
按下载量换算80

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

需要联网

该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills