AgentSkillsCN

cloud-skill

AWS、Azure、GCP云基础设施——架构、服务、安全与成本优化

SKILL.md
--- frontmatter
name: cloud-skill
description: Cloud infrastructure with AWS, Azure, GCP - architecture, services, security, and cost optimization.
sasmp_version: "1.3.0"
bonded_agent: 07-cloud-infrastructure
bond_type: PRIMARY_BOND

parameters:
  - name: provider
    type: string
    required: false
    enum: ["aws", "azure", "gcp", "multi-cloud"]
    default: "aws"
  - name: service
    type: string
    required: false
    enum: ["compute", "storage", "database", "networking", "serverless"]
    default: "compute"

retry_config:
  strategy: exponential_backoff
  initial_delay_ms: 1000
  max_retries: 3

observability:
  logging: structured
  metrics: enabled

Cloud Infrastructure Skill

Overview

Master cloud platforms: AWS, Azure, and GCP.

Parameters

NameTypeRequiredDefaultDescription
providerstringNoawsCloud provider
servicestringNocomputeService type

Core Topics

MANDATORY

  • •AWS: EC2, S3, RDS, Lambda, VPC
  • •Azure: VMs, Storage, AKS
  • •GCP: Compute Engine, GKE
  • •IAM and security
  • •Networking (VPCs, subnets)

OPTIONAL

  • •Cost optimization
  • •Multi-cloud strategies
  • •Managed Kubernetes
  • •Serverless patterns

ADVANCED

  • •Well-Architected Framework
  • •Landing zones
  • •Organizations/Control Tower
  • •FinOps

Service Comparison

CategoryAWSAzureGCP
ComputeEC2VMsCompute Engine
K8sEKSAKSGKE
ServerlessLambdaFunctionsCloud Functions
StorageS3BlobCloud Storage

Quick Reference

bash
# AWS CLI
aws sts get-caller-identity
aws ec2 describe-instances
aws s3 ls s3://bucket-name
aws eks update-kubeconfig --name cluster

# Azure CLI
az login
az account list
az vm list
az aks get-credentials --name cluster

# GCP CLI
gcloud auth login
gcloud projects list
gcloud compute instances list
gcloud container clusters get-credentials cluster

Troubleshooting

Common Failures

SymptomRoot CauseSolution
Access DeniedIAM policyCheck policies
Quota ExceededService limitRequest increase
TimeoutNetwork/SGCheck VPC, SGs
Cost spikeRunaway resourcesCost Explorer

Debug Checklist

  1. •Identity: aws sts get-caller-identity
  2. •Region: echo $AWS_REGION
  3. •Permissions: Check IAM
  4. •CloudTrail: Audit logs

Recovery Procedures

Compromised Key

  1. •Disable key immediately
  2. •Review CloudTrail
  3. •Rotate credentials

Resources