cloud-skill
Cloud infrastructure with AWS, Azure, GCP - architecture, services, security, and cost optimization.
When & Why to Use This Skill
This Claude skill provides a comprehensive toolkit for managing and optimizing multi-cloud environments across AWS, Azure, and GCP. It assists users in designing robust cloud architectures, implementing security best practices through IAM and networking, and managing costs effectively. By providing quick-reference CLI commands and detailed troubleshooting guides, it streamlines cloud operations and ensures high availability for modern enterprise applications.
Use Cases
- Multi-Cloud Architecture Design: Comparing and selecting the best-fit services (Compute, Storage, K8s) across AWS, Azure, and GCP to build resilient systems.
- Security Auditing and IAM Management: Troubleshooting 'Access Denied' errors, configuring VPC subnets, and implementing recovery procedures for compromised credentials.
- Cost Optimization and FinOps: Identifying cost spikes, managing service quotas, and applying Well-Architected Framework principles to reduce cloud expenditure.
- DevOps Operations: Rapidly accessing CLI commands for EKS/AKS/GKE cluster management and serverless deployment workflows.
| name | cloud-skill |
|---|---|
| description | Cloud infrastructure with AWS, Azure, GCP - architecture, services, security, and cost optimization. |
| sasmp_version | "1.3.0" |
| bonded_agent | 07-cloud-infrastructure |
| bond_type | PRIMARY_BOND |
| - name | service |
| type | string |
| required | false |
| enum | ["compute", "storage", "database", "networking", "serverless"] |
| default | "compute" |
| strategy | exponential_backoff |
| initial_delay_ms | 1000 |
| max_retries | 3 |
| logging | structured |
| metrics | enabled |
Cloud Infrastructure Skill
Overview
Master cloud platforms: AWS, Azure, and GCP.
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| provider | string | No | aws | Cloud provider |
| service | string | No | compute | Service type |
Core Topics
MANDATORY
- AWS: EC2, S3, RDS, Lambda, VPC
- Azure: VMs, Storage, AKS
- GCP: Compute Engine, GKE
- IAM and security
- Networking (VPCs, subnets)
OPTIONAL
- Cost optimization
- Multi-cloud strategies
- Managed Kubernetes
- Serverless patterns
ADVANCED
- Well-Architected Framework
- Landing zones
- Organizations/Control Tower
- FinOps
Service Comparison
| Category | AWS | Azure | GCP |
|---|---|---|---|
| Compute | EC2 | VMs | Compute Engine |
| K8s | EKS | AKS | GKE |
| Serverless | Lambda | Functions | Cloud Functions |
| Storage | S3 | Blob | Cloud Storage |
Quick Reference
# AWS CLI
aws sts get-caller-identity
aws ec2 describe-instances
aws s3 ls s3://bucket-name
aws eks update-kubeconfig --name cluster
# Azure CLI
az login
az account list
az vm list
az aks get-credentials --name cluster
# GCP CLI
gcloud auth login
gcloud projects list
gcloud compute instances list
gcloud container clusters get-credentials cluster
Troubleshooting
Common Failures
| Symptom | Root Cause | Solution |
|---|---|---|
| Access Denied | IAM policy | Check policies |
| Quota Exceeded | Service limit | Request increase |
| Timeout | Network/SG | Check VPC, SGs |
| Cost spike | Runaway resources | Cost Explorer |
Debug Checklist
- Identity:
aws sts get-caller-identity - Region:
echo $AWS_REGION - Permissions: Check IAM
- CloudTrail: Audit logs
Recovery Procedures
Compromised Key
- Disable key immediately
- Review CloudTrail
- Rotate credentials