aws-cloud-services_skill

Overview

This skill provides a comprehensive, practical guide and tooling patterns for building, deploying, and operating applications on Amazon Web Services. It covers core services—S3, Lambda, DynamoDB, EC2, RDS, IAM, and CloudFormation—plus secure credential handling, SDK best practices, and enterprise architecture patterns. You get concrete operations, code patterns, and deployment approaches that speed up development and reduce operational risk.

How this skill works

The skill explains what to configure and how to interact with AWS services using the AWS SDK (JavaScript v3) and CLI patterns. It includes common code snippets for uploads, downloads, presigned URLs, multipart uploads, Lambda handlers, IAM policy examples, credential resolution, and region/endpoint configuration. It highlights operational workflows like infrastructure-as-code via CloudFormation, least-privilege IAM design, and multipart/large-file handling for S3.

When to use it

• Building scalable web or mobile backends on AWS
• Creating serverless APIs and event-driven pipelines with Lambda
• Storing, serving, and protecting files at scale with S3
• Designing NoSQL solutions or single-table patterns with DynamoDB
• Provisioning and managing compute with EC2 or managed databases with RDS
• Automating deployments, multi-account architecture, and security controls with CloudFormation and IAM

Best practices

• Apply least-privilege for IAM: start with no access and add permissions incrementally
• Never hardcode credentials; prefer IAM roles, environment variables, or Secrets Manager
• Use SDK v3 modular clients and command pattern for smaller bundles and better typing
• Use presigned URLs for client uploads/downloads to avoid exposing credentials
• Use multipart upload for large S3 objects and abort incomplete uploads to avoid charges
• Define regions and endpoints explicitly for predictable latency and compliance

Example use cases

• Serverless image processing pipeline: S3 upload -> Lambda thumbnail generator -> DynamoDB metadata store
• Web app file handling: presigned S3 upload URLs and lifecycle policies to control cost
• Data pipeline: ingest logs into S3, process with Lambda or AWS Batch, store aggregates in RDS or DynamoDB
• CI/CD: CloudFormation templates to deploy stacks, roles, and networking across accounts
• Migration: lift-and-shift portions to EC2 or RDS while re-architecting new features as Lambda microservices