AWS | Amazon Web Services

What This Skill Does

The AWS | Amazon Web Services skill for OpenClaw is a comprehensive infrastructure management agent designed to assist developers and system administrators in architecting, deploying, and optimizing cloud environments. It serves as an expert consultant that prioritizes cost efficiency, security hardening, and infrastructure-as-code (IaC) best practices. By managing local memory files such as memory.md, resources.md, and costs.md, the agent maintains an accurate state of your cloud footprint, ensuring that deployments align with your project requirements while avoiding common pitfalls like runaway NAT Gateway costs or orphaned EBS snapshots.

Installation

To integrate this skill, use the command clawhub install openclaw/skills/skills/ivangdavila/aws within your OpenClaw environment. Once installed, refer to the setup.md file located in the skill directory to configure your AWS credentials. The agent works immediately for architectural advice, but linking your AWS CLI profile is recommended for real-time infrastructure auditing and deployment automation.

Use Cases

This skill is ideal for teams or solo developers needing to bridge the gap between abstract requirements and production-ready AWS architecture. It is perfect for: 1) Designing cost-effective startup stacks that scale; 2) Implementing security hardening for existing VPCs and IAM policies; 3) Automating infrastructure provisioning via Terraform or CloudFormation; 4) Auditing existing accounts to identify waste, such as unattached volumes, idle RDS instances, or missing lifecycle policies for snapshots.

Example Prompts

1. "I need to deploy a scalable web application for a startup expecting 5,000 monthly active users. Please recommend a cost-effective architecture and provide the Terraform code for the baseline setup."
2. "My monthly AWS bill spiked unexpectedly. Can you audit my account resources, specifically focusing on data processing costs and NAT Gateway usage?"
3. "Help me secure my production RDS database. I need to ensure it's not publicly accessible, has encryption at rest enabled, and follows the principle of least privilege for IAM users."

Tips & Limitations

Always check your ~/aws/ memory files before initiating a new task; the agent relies on this state to avoid drift. Be aware that this skill performs sensitive operations: it can execute AWS CLI commands, so ensure your provided IAM role has the minimum permissions necessary for the tasks at hand. While the agent suggests cost-saving measures, always review Terraform plans manually before applying changes to production. Finally, remember that local memory files must be kept up-to-date; if you make changes in the AWS Console, tell the agent so it can reconcile its records.