aws-cloud

v0.3.4

AWS cloud infrastructure & platform team — agents (aws-architect, aws-iam-identity-engineer, aws-network-engineer, aws-compute-platform-engineer, aws-ops-finops-engineer) for the AWS layer of a stack: multi-account landing zones (Organizations, Control Tower, SCPs), least-privilege IAM (roles over keys, IRSA, permission boundaries, Identity Center), VPC networking (subnets, security groups, PrivateLink/endpoints, Transit Gateway), compute selection (Lambda / ECS / EKS / Fargate / App Runner), event-driven integration (SQS/SNS/EventBridge/Step Functions), and observability + FinOps + Well-Architected governance. skills, a decision-tree knowledge bank (compute-selection + account-strategy trees + a dated 2026 capability map), best-practices, templates, commands, an advisory hook. Multi-cloud seam to azure-cloud/gcp-cloud; IaC -> terraform-iac; containers -> cloud-native-kubernetes; security verdicts -> ravenclaude-core/security-reviewer. Requires ravenclaude-core@>=0.7.0.

Claude Code6 Skills1 MCP serverstdio

By Matt CorbettLicense: MIT7 GitHub starsUpdated last week

Directory evidence

Runtimes: Claude Code
Parsed components: 7 skill or MCP entries
Source updated: Sep 15, 2026
Manifest status: Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install aws-cloud for Claude Code

Installs for the current user

claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install aws-cloud@agent-plugin-marketplace

Paste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually

$ git clone https://github.com/mcorbett51090/RavenClaude

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/aws-cloud/.

Plugin files

plugins/aws-cloud/

├── .claude-plugin/plugin.json
├── skills/aws-account-strategy/SKILL.md
├── skills/aws-compute-selection/SKILL.md
├── skills/aws-finops/SKILL.md
├── skills/aws-least-privilege-iam/SKILL.md
├── skills/aws-observability-and-alerting/SKILL.md
├── skills/vpc-network-design/SKILL.md
└── .mcp.json

Included Skills6

aws-account-strategyskills/aws-account-strategy/SKILL.md

Design a multi-account AWS landing zone: separate accounts by blast radius (prod/non-prod/security/shared-services) under Organizations, SCP guardrails as ceilings, region/AZ resilience, and the Control-Tower-or-not decision.

aws-compute-selectionskills/aws-compute-selection/SKILL.md

Choose AWS compute by workload shape and operational burden: Lambda (event/spiky), Fargate/App Runner (containers, no cluster ops), EKS (k8s/portability), EC2 (legacy/specific); design event-driven integration with idempotency and DLQs.

aws-finopsskills/aws-finops/SKILL.md

Control AWS cost: cost allocation tags from day one, budgets + anomaly detection, rightsize before committing to Savings Plans/RIs, tested backups, and continuous zombie-resource cleanup.

aws-least-privilege-iamskills/aws-least-privilege-iam/SKILL.md

Write least-privilege AWS IAM: scope actions and resource ARNs to exactly what's needed, attach to roles (not users/keys), prefer federation (IRSA/OIDC) and Identity Center, and cap with permission boundaries + SCPs.

aws-observability-and-alertingskills/aws-observability-and-alerting/SKILL.md

Step-by-step playbook for wiring CloudWatch metrics, alarms, dashboards, and X-Ray distributed tracing into an AWS workload — from log groups and metric filters to composite alarms and anomaly detection.

vpc-network-designskills/vpc-network-design/SKILL.md

Step-by-step playbook for designing an AWS VPC — CIDR allocation, subnet layout, routing, security groups vs NACLs, egress control, and PrivateLink/VPC endpoint placement. Covers single-VPC through multi-account Transit Gateway topologies.

MCP servers1

aws-documentationstdio

command: uvx
args: awslabs.aws-documentation-mcp-server@latest
env.FASTMCP_LOG_LEVEL: ERROR

Plugin manifests1

plugins/aws-cloud/.claude-plugin/plugin.json

{
  "name": "aws-cloud",
  "version": "0.3.4",
  "description": "AWS cloud infrastructure & platform team — agents (aws-architect, aws-iam-identity-engineer, aws-network-engineer, aws-compute-platform-engineer, aws-ops-finops-engineer) for the AWS layer of a stack: multi-account landing zones (Organizations, Control Tower, SCPs), least-privilege IAM (roles over keys, IRSA, permission boundaries, Identity Center), VPC networking (subnets, security groups, PrivateLink/endpoints, Transit Gateway), compute selection (Lambda / ECS / EKS / Fargate / App Runner), event-driven integration (SQS/SNS/EventBridge/Step Functions), and observability + FinOps + Well-Architected governance. skills, a decision-tree knowledge bank (compute-selection + account-strategy trees + a dated 2026 capability map), best-practices, templates, commands, an advisory hook. Multi-cloud seam to azure-cloud/gcp-cloud; IaC -> terraform-iac; containers -> cloud-native-kubernetes; security verdicts -> ravenclaude-core/security-reviewer. Requires ravenclaude-core@>=0.7.0.",
  "author": {
    "name": "Matt Corbett"
  },
  "homepage": "https://github.com/mcorbett51090/RavenClaude",
  "license": "MIT",
  "keywords": [
    "aws",
    "amazon-web-services",
    "iam",
    "vpc",
    "lambda",
    "ecs",
    "eks",
    "fargate",
    "eventbridge",
    "step-functions",
    "organizations",
    "control-tower",
    "well-architected",
    "privatelink",
    "finops",
    "landing-zone"
  ],
  "requires": {
    "plugins": [
      "ravenclaude-core@>=0.7.0"
    ]
  },
  "mcpServers": {
    "aws-documentation": {
      "command": "uvx",
      "args": [
        "awslabs.aws-documentation-mcp-server@latest"
      ],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      }
    }
  },
  "x-mcpAttribution": {
    "aws-documentation": {
      "party": "third-party",
      "source": "https://github.com/awslabs/mcp/tree/main/src/aws-documentation-mcp-server",
      "license": "Apache-2.0",
      "notice": "NOTICE.md"
    }
  }
}