Browse Skills

AWS Transform migrates, modernizes, and upgrades codebases to AWS. It analyzes repos for tech debt, security issues, and modernization opportunities such as .NET, COBOL, VMware, SQL Server, Java, Python, Node.js, and AWS SDK upgrades.

Deploy On AWS analyzes an application and chooses suitable AWS services, then estimates cost and generates infrastructure as code with security defaults. Use it when you want to host or run a codebase on AWS with minimal decisions.

Elastic Beanstalk deploys web and worker applications to AWS with managed scaling, patching, health checks, and deployments. Use it when you want a standard application runtime without managing servers or container orchestration.

HyperPod Cluster Debugger diagnoses read-only HyperPod cluster failures for EKS or Slurm, including provisioning, access, CloudFormation, capacity, and node issues. It uses `--validate` for pre-flight checks before creation or remediation.

HyperPod Issue Report collects diagnostic logs and configuration from HyperPod EKS or Slurm clusters and stores them in S3. Use it to troubleshoot node failures, capture cluster state, or prepare AWS Support cases.

HyperPod NCCL Debugger diagnoses NCCL and related training-pod failures on SageMaker HyperPod GPU clusters. Use it for hangs, collective timeouts, EFA or libfabric errors, rendezvous failures, OOMs, DNS issues, and pod scheduling problems.

Hyperpod Node Debugger diagnoses and helps remediate a single unhealthy HyperPod node in EKS or Slurm. Use it for node-level EFA, GPU, disk, memory, SSM, runtime, or lifecycle-script issues; it is read-only and not for cluster-wide provisioning.

HyperPod Performance Debugger diagnoses uneven NCCL bandwidth across nodes and slow filesystem throughput on Amazon SageMaker HyperPod. It gathers read-only host signals and routes hardware, version, or NCCL issues to sibling skills.

Implements API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and scraping attacks. Includes distributed Redis-backed limiters with verification steps.

Provides detection rules and techniques for identifying API enumeration attacks, including BOLA and IDOR, using SIEM queries and scripts.

Provides configurations for API gateways (Kong, AWS) to enforce JWT authentication, rate limiting, request validation, and security headers, helping protect backend APIs from injection, token misuse, and other threats.

Implements API rate limiting and throttling with token bucket, sliding window, and fixed window algorithms. Useful for protecting authentication endpoints, preventing API abuse, and enforcing fair usage quotas.