Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Chat-based interface for querying and auditing AWS resources via the local AWS CLI. Defaults to read-only operations across EC2, S3, IAM, Lambda, ECS/EKS, RDS, CloudWatch, and billing. Any write or destructive action requires explicit user confirmation before execution.
Answers AWS resource questions directly in chat without switching between the console, CLI docs, and terminal tabs.
When to use it
- Listing all EC2 instances and their current status in a region
- Auditing S3 buckets for public access exposure
- Checking IAM user permissions and active policies
- Querying CloudWatch logs for recent Lambda errors
- Reviewing current AWS spend and cost breakdowns by service
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Which of my S3 buckets have public access enabled?
- 1Runs aws sts get-caller-identity to confirm active account and region
- 2Runs aws s3api list-buckets to retrieve all bucket names
- 3Checks public access block configuration for each bucket via aws s3api get-public-access-block
- 4Compiles buckets where any block setting is false or missing
A list of bucket names with public access enabled, along with the specific block settings that are off
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.