Marketplace

Use when planning a provider-to-provider cloud migration: service equivalence map, egress cost model, cutover runbook, rollback plan and lock-in scoring.

Use when asked to audit, score, or harden an AWS account, Organization, or workload across the six Well-Architected pillars with evidence-backed findings.

Invoke to cut an existing AWS bill: find idle resources, unattached EBS, NAT egress, oversized instances and missing Savings Plans, with quantified savings.

Use when managing AWS S3, EBS, EFS, RDS or DynamoDB: buckets, encryption, lifecycle, snapshots, backups, restores and verified data migration.

Invoke to instrument or investigate a live AWS workload: CloudWatch alarms and metric math, Logs Insights, X-Ray traces, CloudTrail forensics, incident triage.

Design, build, and debug AWS VPC networking: subnets, routes, NAT/IGW, security groups vs NACLs, endpoints, peering/TGW, Route 53, ELB, plus a triage protocol.

Invoke to design, audit or debug AWS IAM: roles, trust policies, boundaries, SCPs, and pinpointing AccessDenied via policy simulator and CloudTrail.

Use to provision and operate AWS compute: EC2, AMIs, ASGs, ECS/Fargate services and Lambda — deploys, rollbacks, logs and right-sizing, with dry-run safety.

Invoke to drive AWS from the CLI or boto3: SSO login, assume-role, profiles, regions, pagination, JMESPath --query, waiters and dry-run-gated mutations.

Design least-privilege IAM policies for AWS, GCP, and Azure: role design, permission boundaries, and access auditing.

Audit cloud infrastructure for cost optimization: right-sizing, reserved capacity, storage tiers, and waste elimination.

Deploy and manage AWS infrastructure with safety: VPC setup, EC2/ECS/EKS provisioning, IAM roles, RDS databases, and pre-deploy cost/safety checks via aws-cli.