Skip to content

Add aws-ecs-operations-review skill - #42

Open
shyamkulkarni wants to merge 1 commit into
aws:mainfrom
shyamkulkarni:feature/aws-ecs-operations-review
Open

Add aws-ecs-operations-review skill#42
shyamkulkarni wants to merge 1 commit into
aws:mainfrom
shyamkulkarni:feature/aws-ecs-operations-review

Conversation

@shyamkulkarni

Copy link
Copy Markdown

Summary

Adds a new ECS Operations Review skill (skills/aws-ecs-operations-review) that performs a comprehensive Amazon ECS operations review across 6 review pillars:

  • Resiliency & HA (REL)
  • Observability (OBS)
  • Security (SEC)
  • Operations (OPS)
  • Performance (PERF)
  • Additional Analysis (ADD)

Key features

  • Strictly read-only — uses only describe* / list* / get* APIs (ECS, CloudWatch, IAM, Application Auto Scaling, ELB, ECR, EC2, GuardDuty, Compute Optimizer); remediations are drafted for human approval, never applied
  • 7-day CloudWatch metrics baseline per service
  • Compute-platform-aware check applicability (Fargate, Fargate Spot, EC2 ASG capacity providers, ECS Managed Instances, ECS Anywhere)
  • Per-pillar PASS/FAIL/N/A scorecards with evidence and severity
  • Recommended CloudWatch alarm thresholds for IDR onboarding
  • Prioritized, remediation-linked report artifact per service
  • Graceful degradation: non-Tier-1 access errors mark dependent checks N/A and the review continues

Contents

  • SKILL.md with frontmatter metadata (version, author, agent types)
  • README.md with usage docs and non-production disclaimer
  • CHANGELOG.md
  • references/ — checks index, per-pillar check definitions, alarm thresholds, report format
  • evals/ — functional evals (evals.json) and trigger tests (eval_queries.json)
  • .skilleval.yaml for Agent Skill Eval
  • llms.txt entry added

Testing

  • Skill structure follows the repo contribution guidelines (SKILL.md + references + evals)
  • Eval queries and functional evals included under evals/

Add a comprehensive Amazon ECS operations review skill covering 6
review pillars (Resiliency & HA, Observability, Security, Operations,
Performance, Additional Analysis) using read-only AWS APIs. Includes
a 7-day CloudWatch metrics baseline, per-pillar PASS/FAIL/N/A
scorecards, recommended alarm thresholds for IDR onboarding, and a
prioritized remediation-linked report artifact. Ships with references,
evals, and skill-eval config per the contribution guidelines.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant