--- title: "aws-core" description: "Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code (CDK, CloudFormation), use core services (Lambda, API Gateway, Step Functions, ECS/Fargate, ECR, IAM, Amazon Bedrock with Knowledge " canonical: https://agentpluginsdirectory.com/plugins/aws-core last-updated: 2026-10-13 --- # aws-core Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code (CDK, CloudFormation), use core services (Lambda, API Gateway, Step Functions, ECS/Fargate, ECR, IAM, Amazon Bedrock with Knowledge Bases and Guardrails, AWS Blocks), select and operate databases across relational, key-value, document, wide-column, graph, time-series, and in-memory engines, and complete common tasks across observability, messaging and streaming, AWS SDKs, cost optimization, and Well-Architected Framework reviews across all six pillars. - Slug: aws-core - Publisher: Amazon Web Services - Repository: https://github.com/aws/agent-toolkit-for-aws - Manifest: plugins/aws-core/plugin.json - Version: 1.1.0 - License: Apache-2.0 - Category (editorial): devops-cloud - Skills: 25 (amazon-bedrock, aws-ai-ml, aws-auth, aws-billing-and-cost-management, aws-blocks, aws-cdk, aws-cloudformation, aws-compute, aws-containers, aws-database, aws-deployment, aws-iam, aws-messaging-and-streaming, aws-networking, aws-observability, aws-sdk-js-v3-usage, aws-sdk-python-usage, aws-sdk-swift-usage, aws-secrets-manager, aws-security, aws-serverless, aws-storage, aws-well-architected-review, launch-with-aws, signing-in-to-aws) - MCP servers: 1 (aws-mcp) - Stars: 2855 - Repository created: 2026-04-23 - Repository last pushed: 2026-10-13 - Publisher type: Organization - Listing: https://agentpluginsdirectory.com/plugins/aws-core - Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json ## What aws-core does, in the publisher's words The primary plugin for the Agent Toolkit for AWS. This plugin gives your AI coding agent the AWS MCP Server configuration and a curated set of agent skills, everything it needs to build, deploy, and manage applications on AWS. From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/aws/agent-toolkit-for-aws/HEAD/plugins/aws-core/README.md ## Skills - amazon-bedrock: Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents, Guardrails, and AgentCore (including the Harness managed agent loop). Use when invoking models, setting up Knowledge Bases, creating agents, applying g… - aws-ai-ml: Selects, deploys, and customizes AI models on Amazon SageMaker. Fine-tuning (SFT, DPO, RLVR, RLAIF), model selection, dataset preparation, evaluation, deployment to SageMaker endpoints or Bedrock, and endpoint diagnostics. Covers the full lifecycle from planning through production. Use when fine-tu… - aws-auth: Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers sign-up/sign-in flows and the login page (Cognito-hosted UI / managed login), MFA, password policies, OAuth 2.0 / OIDC flows (auth-code + PKCE, clien… - aws-billing-and-cost-management: Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute Optimizer, look up service pricing, query CUR with Athena, detect cost anomalies, scope costs to billing views, and monitor Free Tier usage. Triggers on: AWS bi… - aws-blocks: Guides building full-stack applications with AWS Blocks, an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks (KVStore, DistributedTable, Database, AuthBasic, AuthCognito, Realtime, AsyncJob, FileBucket, etc.), running local development, or deploying AWS Blo… - aws-cdk: Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct patterns. Always use when writing CDK constructs, bootstrapping environments, running cdk deploy/synth/diff, fixing CDK or CloudFormation errors, plan… - aws-cloudformation: Authors, validates, and troubleshoots AWS CloudFormation templates. Covers template authoring with secure defaults, pre-deployment validation (cfn-lint, cfn-guard, change sets), CloudFormation Express mode for faster deployments, and root-cause diagnosis of failed stacks using CloudFormation events… - aws-compute: Provisions, scales, and operates Amazon EC2 virtual-machine workloads: instance-type selection (Graviton/Arm64, burstable T credits, GPU, instance store vs EBS), launch templates, Auto Scaling groups (scaling policies, instance refresh, mixed instances, Spot, warm pools, lifecycle hooks), IMDSv2, p… - aws-containers: Builds and deploys containerized workloads on Elastic Kubernetes Service (EKS), Elastic Container Service (ECS), Fargate, and ECR (Elastic Container Registry). Covers general EKS knowledge, Karpenter, AWS Load Balancer Controller and leveraging various open source Kubernetes projects with EKS. Cove… - aws-database: Routes any task involving AWS databases, choosing, comparing, recommending, getting started with, or operating a database, to the correct service-specific skill. Supersedes general training-data knowledge with post-training service updates, corrected limitations, and decision procedures for relat… - aws-deployment: Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables, execution modes, cross-account), buildspec.yml (caching, VPC, Docker), CodeDeploy strategies (blue/green, canary, linear), CodeArtifact (private… - aws-iam: Provides verified corrections for IAM behaviors that AI agents frequently get wrong, policy evaluation edge cases, trust policy gotchas, STS session limits, Organizations quirks, and SAML/MFA specifics. Also provides structured workflows for IAM role management and baseline policy generation from… - aws-messaging-and-streaming - aws-networking - aws-observability - aws-sdk-js-v3-usage - aws-sdk-python-usage - aws-sdk-swift-usage - aws-secrets-manager - aws-security - aws-serverless - aws-storage - aws-well-architected-review - launch-with-aws - signing-in-to-aws Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized. ## MCP servers - aws-mcp: transport: stdio; command: uvx mcp-proxy-for-aws-cli@latest https://aws-mcp.us-east-1.api.aws/mcp --skip-auth --metadata INSTALL_SOURCE=agent-toolkit-core Read from the plugin's own mcp.json. Environment variable names only, never values.