AWS Agentic AI Plugin

repository·main·Indexed 43 days ago

https://github.com/zxkane/aws-skills

A secure, serverless hosting environment (Runtime Service) for deploying AI agents and tools. It includes the Amazon Bedrock AgentCore Browser Service for web automation, a Code Interpreter for secure code execution, and AgentCore Evaluations for automated performance scoring using LLM-as-a-Judge techniques. Supports integration with Strands Agents and LangGraph via OpenTelemetry and OpenInference.

Tokens
137.2K
Snippets
281
Records
395
Agent score
77%

What's inside AWS Agentic AI

  1. Overview of AWS Skills Plugins

    main

    The aws-skills repository provides specialized knowledge and MCP (Model Context Protocol) server integrations for Claude Code.

    Available Plugins

    • AWS Common Plugin: A required dependency providing AWS Documentation MCP configuration for up-to-date knowledge.
    • AWS CDK Plugin: Focuses on Infrastructure as Code (IaC) with integrated CDK MCP servers and best practices.
    • AWS Cost & Operations Plugin: Provides cost estimation, optimization, and monitoring via integrated MCP servers for AWS Pricing, Cost Explorer, and CloudWatch.
    • AWS Serverless & Event-Driven Architecture Plugin: Covers Well-Architected serverless design, Step Functions orchestration, and patterns like Saga or Event Sourcing.
    • AWS Agentic AI Plugin: An expert for Amazon Bedrock AgentCore, covering gateway services, runtime, memory, identity, and observability for AI agents.
  2. Overview of the AWS Cost & Operations Skill

    main

    The aws-cost-operations skill is designed for AWS cost optimization, monitoring, observability, and operational excellence. It is the primary skill to use when you need to analyze AWS bills, estimate costs for new resources, set up CloudWatch alarms, query logs, audit CloudTrail activity, or assess security posture.

    Key triggers for this skill include mentions of:

    • AWS costs, spending, billing, budget, or pricing
    • CloudWatch, observability, monitoring, or alerting
    • CloudTrail, audit, or security posture
    • Optimizing infrastructure costs or operational efficiency.
  3. Overview of AWS Agent Registry Service

    main
    AWS Agent Registry is a managed discovery service within Amazon Bedrock AgentCore. It provides a private, governed catalog for organizing and discovering AI agents, MCP servers, tools, agent skills, and custom resources across an organization. It solves the problem of resource siloing by providing a central location for builders to discover existing capabilities.
  4. Overview of SST v4 (Ion) for AWS

    main

    SST v4 (the "Ion" engine) is a Pulumi-backed Infrastructure as Code (IaC) framework where you describe AWS resources using TypeScript. It provides high-level sst.aws.* components (such as Function, Bucket, Dynamo, Cron, Service, etc.) that expand into multiple underlying AWS resources. It also allows for an escape hatch to use any raw Pulumi aws.* resources.

    Key Identification:

    • Use this skill when working with sst.config.ts, $config, $transform, $interpolate, sst.aws.*, sst.Secret, or running commands like sst deploy, sst dev, sst diff, or sst remove.
    • Note: This is specifically for SST v4. For SST v2/v3 (SST Classic/CDK-based), these patterns do not apply.
  5. Overview of AWS Bedrock AgentCore Services

    main

    AWS Bedrock AgentCore is a platform for deploying and scaling AI agents using nine core services. Use the following table to identify the service required for your task:

    ServiceUse For
    GatewayConverting REST APIs to MCP tools
    RuntimeDeploying and scaling agents
    MemoryManaging conversation state
    IdentityCredential and access management
    Code InterpreterSecure code execution in sandboxes
    BrowserWeb automation and scraping
    ObservabilityTracing and monitoring
    Agent RegistryCatalog, discover, and govern agents/tools (Preview)
    EvaluationsAutomated agent quality assessment (LLM-as-a-Judge)

    For specific implementation details, refer to the individual service READMEs within the services/ directory.

  6. Overview of Amazon Bedrock AgentCore Identity

    main

    Amazon Bedrock AgentCore Identity is a specialized identity and credential management service for AI agents and automated workloads. It enables agents to securely access AWS resources and third-party services on behalf of users.

    Key capabilities include:

    • Centralized Identity Management: Managing workload identities through a unified directory with hierarchical organization.
    • Secure Credential Storage: A 'Token Vault' that encrypts OAuth 2.0 tokens, client credentials, and API keys at rest and in transit.
    • OAuth 2.0 Support: Support for both Machine-to-Machine (Client Credentials Grant) and User-Delegated (Authorization Code Grant) flows.
    • Credential Provider Management: Automated lifecycle management including token refresh and provider discovery.
    • Audit & Verification: Maintains audit trails for all actions performed on behalf of users and performs request verification (signature, expiration, and scope checks).
  7. Use the AWS Serverless & Event-Driven Architecture skill

    main

    This skill provides guidance for building serverless applications and event-driven architectures on AWS based on Well-Architected Framework principles. It is designed for building serverless APIs, Lambda functions, microservices, or asynchronous workflows.

    When to use this skill:

    • Building serverless applications with Lambda
    • Designing event-driven architectures
    • Implementing microservices patterns
    • Creating asynchronous processing workflows
    • Orchestrating multi-service transactions
    • Building real-time data processing pipelines
    • Implementing saga patterns for distributed transactions
    • Designing for scale and resilience

    Dependencies & Tools:

    • Automatically loads aws-mcp-setup.
    • Leverages the CDK MCP server (via aws-cdk-development) and AWS Documentation MCP.
    • Note: Specialized MCP servers for SAM CLI, direct Lambda invocation, Step Functions, and SNS/SQS are not bundled here and must be provided via the Full AWS MCP Server.
  8. Overview of AgentCore Runtime Protocols

    main

    AgentCore Runtime supports four distinct communication protocols. A single Runtime instance can only be configured with one protocol at creation time via protocolConfiguration. While the underlying infrastructure (MicroVM isolation, OAuth/SigV4, auto-scaling) is shared, the communication contract inside the container differs by protocol.

    ProtocolPurposePortPrimary EndpointCommunication Mode
    HTTPGeneral-purpose agent interaction8080POST /invocationsJSON / SSE / WebSocket
    MCPTool and data services8000POST /mcpJSON-RPC 2.0
    A2AInter-agent collaboration9000POST /JSON-RPC 2.0
    AG-UIAgent-to-frontend UI8080POST /invocationsSSE event stream

    Universal Requirement: All protocols must implement the GET /ping health check endpoint, which must return {"status": "Healthy"} or {"status": "HealthyBusy"}.

    POST https://bedrock-agentcore.{region}.amazonaws.com/runtimes/{urlEncodedArn}/invocations?qualifier=DEFAULT
  9. What is Amazon Bedrock AgentCore

    main
    Amazon Bedrock AgentCore is a serverless agent hosting platform that runs agent containers in an AWS-managed environment. It provides enterprise-grade services like Memory (short-term and long-term), Gateway (MCP tool conversion and OAuth injection), Identity (JWT/OAuth), Observability (OpenTelemetry), and a Code Interpreter sandbox. It is framework-agnostic (supporting Strands, LangGraph, CrewAI, etc.) and model-agnostic.
  10. Integrate tools using Custom HTTP (Pattern B)

    main

    Pattern B is a stateless approach where the Agent uses local @tool functions to make direct HTTP calls to backend APIs. This pattern does not use the MCP protocol and has no persistent connection overhead. It is ideal for calling internal microservices (e.g., /api/svc/*).

    Each tool call is an independent request. You can implement wrappers to automatically inject authentication headers (like API keys) into these requests.

    @tool
    def http_request(url: str, method: str = "GET", **kwargs) -> str:
        """Call backend API with auto-injected auth headers."""
        headers = kwargs.get("headers", {})
        if "/api/svc/" in url:
            headers["X-Service-Api-Key"] = _service_api_key
        response = requests.request(method, url, headers=headers, **kwargs)
        return response.text
  11. Orchestrate workflows with Step Functions instead of Lambda chaining

    main

    Avoid 'Lambda chaining' (where one function invokes another directly). Instead, use AWS Step Functions to orchestrate workflows. This provides visual representation, built-in error handling/retries, execution history, and service integrations without writing glue code.

    // ❌ BAD - Lambda function chaining
    export const handler1 = async (event: any) => {
      const result = await processStep1(event);
      await lambda.invoke({
        FunctionName: 'handler2',
        Payload: JSON.stringify(result),
      });
    };
    
    // ✅ GOOD - Step Functions orchestration
    const stateMachine = new stepfunctions.StateMachine(this, 'OrderWorkflow', {
      definition: stepfunctions.Chain
        .start(validateOrder)
        .next(processPayment)
        .next(shipOrder)
        .next(sendConfirmation),
    });