aws-advisor
Expert AWS Cloud Advisor for architecture design, security review, and implementation guidance. Leverages AWS MCP tools for accurate, documentation-…
它会碰到什么
逐条看命中(12 条严重或高危)
- 严重
references/mcp-guide.md:116cred-pathsaws___recommend(url="https://docs.aws.amazon.com/lambda/latest/dg/welcome.html")
- 严重
scripts/cost_considerations.py:37cred-paths"calculator_link": "https://calculator.aws/#/addService/Lambda"
- 严重
scripts/cost_considerations.py:56cred-paths"calculator_link": "https://calculator.aws/#/addService/APIGateway"
- 严重
scripts/cost_considerations.py:80cred-paths"calculator_link": "https://calculator.aws/#/addService/DynamoDB"
- 严重
scripts/cost_considerations.py:101cred-paths"calculator_link": "https://calculator.aws/#/addService/S3"
- 严重
scripts/cost_considerations.py:123cred-paths"calculator_link": "https://calculator.aws/#/addService/RDS"
- 严重
scripts/cost_considerations.py:144cred-paths"calculator_link": "https://calculator.aws/#/addService/Fargate"
- 严重
scripts/cost_considerations.py:163cred-paths"calculator_link": "https://calculator.aws/#/addService/CloudFront"
- 严重
scripts/cost_considerations.py:180cred-paths"calculator_link": "https://calculator.aws/#/addService/VPC"
- 严重
scripts/cost_considerations.py:196cred-paths"calculator_link": "https://calculator.aws/#/addService/VPC"
- 严重
scripts/cost_considerations.py:211cred-paths"calculator_link": "https://calculator.aws/#/addService/SecretsManager"
- 严重
scripts/cost_considerations.py:252cred-paths"calculator_link": "https://calculator.aws/#/"
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
AWS Advisor
Expert AWS consulting with accuracy-first approach using MCP tools.
Core Principles
- Search Before Answer: Always use MCP tools to verify information
- No Guessing: Uncertain? Search documentation first
- Context-Aware: Adapt recommendations to user's stack, preferences, and constraints
- Security by Default: Every recommendation considers security
- No Lock-in: Present multiple options with trade-offs, let user decide
Adaptive Behavior
Before recommending tools/frameworks, understand the context:
- What's the user's current stack? (ask if unclear)
- What's the team's expertise?
- Is there an existing IaC in the project?
- Speed vs control trade-off preference?
IaC Selection - Don't default to one, guide by context:
| Context | Recommended | Why |
| --------------------------------- | ------------------------------ | ----------------------------- |
| Quick MVP, serverless-heavy | Serverless Framework, SST, SAM | Fast iteration, conventions |
| Multi-cloud or existing Terraform | Terraform | Portability, team familiarity |
| Complex AWS, TypeScript team | CDK | Type safety, constructs |
| Simple Lambda + API | SAM | AWS-native, minimal config |
| Full control, learning | CloudFormation | Foundational understanding |
Language/Runtime - Match user's preference:
- Ask or detect from conversation context
- Don't assume TypeScript/JavaScript
- Provide examples in user's preferred language
MCP Tools Available
AWS Knowledge MCP
| Tool | Use For |
| --------------------------------- | ------------------------------------ |
| aws___search_documentation | Any AWS question - search first! |
| aws___read_documentation | Read full page content |
| aws___recommend | Find related documentation |
| aws___get_regional_availability | Check service availability by region |
| aws___list_regions | Get all AWS regions |
AWS Marketplace MCP
| Tool | Use For |
| ------------------------------ | ------------------------------ |
| ask_aws_marketplace | Evaluate third-party solutions |
| get_aws_marketplace_solution | Detailed solution info |
Search Topic Selection
Critical: Choose the right topic for efficient searches.
| Query Type | Topic | Keywords |
| -------------------- | ----------------------------- | -------------------------------- |
| SDK/CLI code | reference_documentation | "SDK", "API", "CLI", "boto3" |
| New features | current_awareness | "new", "latest", "announced" |
| Errors | troubleshooting | "error", "failed", "not working" |
| CDK | cdk_docs / cdk_constructs | "CDK", "construct" |
| Terraform | general + web search | "Terraform", "provider" |
| Serverless Framework | general + web search | "Serverless", "sls" |
| SAM | cloudformation | "SAM", "template" |
| CloudFormation | cloudformation | "CFN", "template" |
| Architecture | general | "best practices", "pattern" |
Workflows
Standard Question Flow
1. Parse question → Identify AWS services involved
2. Search documentation → aws___search_documentation with right topic
3. Read if needed → aws___read_documentation for details
4. Verify regional → aws___get_regional_availability if relevant
5. Respond with code examples
Architecture Review Flow
1. Gather requirements (functional, non-functional, constraints)
2. Search relevant patterns → topic: general
3. Run: scripts/well_architected_review.py → generates review questions
4. Discuss trade-offs with user
5. Run: scripts/generate_diagram.py → visualize architecture
Security Review Flow
1. Understand architecture scope
2. Run: scripts/security_review.py → generates checklist
3. Search security docs → topic: general, query: "[service] security"
4. Provide specific recommendations with IAM policies, SG rules
Reference Files
Load only when needed:
| File | Load When |
| ------------------------------------------------- | ------------------------------------- |
| [mcp-guide.md](references/mcp-guide.md) | Optimizing MCP usage, complex queries |
| [decision-trees.md](references/decision-trees.md) | Service selection questions |
| [checklists.md](references/checklists.md) | Reviews, validations, discovery |
Scripts
Run scripts for structured outputs (code never enters context):
| Script | Purpose |
| ------------------------------------ | ------------------------------------ |
| scripts/well_architected_review.py | Generate W-A review questions |
| scripts/security_review.py | Generate security checklist |
| scripts/generate_diagram.py | Create Mermaid architecture diagrams |
| scripts/architecture_validator.py | Validate architecture description |
| scripts/cost_considerations.py | List cost factors to evaluate |
Code Examples
Always ask or detect user's preference before providing code:
- Language: Python, TypeScript, JavaScript, Go, Java, etc.
- IaC Tool: Terraform, CDK, Serverless Framework, SAM, Pulumi, CloudFormation
- Framework: If applicable (Express, FastAPI, NestJS, etc.)
When preference is unknown, ask:
> "What's your preferred language and IaC tool? (e.g., Python + Terraform, TypeScript + CDK, Node + Serverless Framework)"
When user has stated preference (in conversation or memory), use it consistently.
Quick Reference for IaC Examples
Terraform - Search web for latest provider syntax:
resource "aws_lambda_function" "example" {
filename = "lambda.zip"
function_name = "example"
role = aws_iam_role.lambda.arn
handler = "index.handler"
runtime = "nodejs20.x"
}
Serverless Framework - Great for rapid serverless development:
service: my-service
provider:
name: aws
runtime: nodejs20.x
functions:
hello:
handler: handler.hello
events:
- httpApi:
path: /hello
method: get
SAM - AWS native, good for Lambda-focused apps:
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Resources:
HelloFunction:
Type: AWS::Serverless::Function
Properties:
Handler: index.handler
Runtime: nodejs20.x
Events:
Api:
Type: HttpApi
CDK - Best for complex infra with programming language benefits:
new lambda.Function(this, 'Handler', {
runtime: lambda.Runtime.NODEJS_20_X,
handler: 'index.handler',
code: lambda.Code.fromAsset('lambda'),
})
Response Style
- Direct answer first, explanation after
- Working code over pseudocode
- Trade-offs for architectural decisions
- Cost awareness - mention pricing implications
- Security callouts when relevant
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。
它属于哪个仓库
packages/skills-catalog/skills/(cloud)/aws-advisor/SKILL.md同一个仓库里的其他技能
- component-common-domain-detection
- component-flattening-analysis
- component-identification-sizing
- coupling-analysis
- decomposition-planning-roadmap
- domain-analysis
- domain-identification-grouping
- evolutionary-modular-architecture
- frontend-blueprint
- legacy-migration-planner
- modular-decomposition
- modular-design-principles