AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN segmentation and DNS Firewall security-control suitability, certificate renewal ownership and monitoring, incident response triage ownership, centralized security log store (CloudWatch or Security Lake).
安装
npx skills add aws/agent-toolkit-for-aws --skill aws-securitynpx skills add aws/agent-toolkit-for-aws --skill aws-security -a claude-code -gnpx skills add aws/agent-toolkit-for-aws --skill aws-security -a codex -ggemini skills install https://github.com/aws/agent-toolkit-for-aws.git --path skills/core-skills/aws-securitygh skill install aws/agent-toolkit-for-aws aws-securitygit clone --depth 1 https://github.com/aws/agent-toolkit-for-aws /tmp/aws__agent-toolkit-for-aws
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/aws__agent-toolkit-for-aws/skills/core-skills/aws-security ~/.claude/skills/aws-security # Claude Code
cp -R /tmp/aws__agent-toolkit-for-aws/skills/core-skills/aws-security ~/.agents/skills/aws-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode