Runs SQL queries on CloudWatch Logs data exported as Apache Iceberg tables in S3 Tables. Covers VPC Flow Logs, WAF logs, CloudFront access logs, Route 53 resolver logs, Network Firewall logs, EKS audit logs, Verified Access logs, SES logs, VPC Lattice logs, Step Functions logs, NLB access logs, and 20+ other AWS vended data sources.
安装
npx skills add aws/agent-toolkit-for-aws --skill querying-aws-cloudwatchnpx skills add aws/agent-toolkit-for-aws --skill querying-aws-cloudwatch -a claude-code -gnpx skills add aws/agent-toolkit-for-aws --skill querying-aws-cloudwatch -a codex -ggemini skills install https://github.com/aws/agent-toolkit-for-aws.git --path skills/specialized-skills/system-table-skills/querying-aws-cloudwatchgh skill install aws/agent-toolkit-for-aws querying-aws-cloudwatchgit clone --depth 1 https://github.com/aws/agent-toolkit-for-aws /tmp/aws__agent-toolkit-for-aws
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/aws__agent-toolkit-for-aws/skills/specialized-skills/system-table-skills/querying-aws-cloudwatch ~/.claude/skills/querying-aws-cloudwatch # Claude Code
cp -R /tmp/aws__agent-toolkit-for-aws/skills/specialized-skills/system-table-skills/querying-aws-cloudwatch ~/.agents/skills/querying-aws-cloudwatch # Codex, Cursor, Gemini CLI, Copilot, OpenCode