aws-deployment

Configures CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, CodeConnections, and CodeArtifact. Covers CodePipeline V2 (triggers, variables, execution modes, cross-account), buildspec.yml (caching, VPC, Docker), CodeDeploy strategies (blue/green, canary, linear), CodeArtifact (private package registries, auth tokens, cross-account), and source connections (GitHub, GitLab, Bitbucket). Applies when CodePipeline, CodeBuild, CodeDeploy, CodeConnections, CodeArtifact, buildspec.yml, appspec.yml, or CI/CD pipeline orchestration is referenced. Does NOT cover: ECS Fargate services or task definitions (use aws-containers), CDK Pipelines or cdk deploy (use aws-cdk), sam deploy (use aws-serverless), Amplify deployments (use aws-amplify), or GitHub Actions/GitLab CI.

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

87%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, high-signal reference skill: concise, highly actionable, with excellent progressive disclosure and verified references. The only gap is that validation/feedback checkpoints for destructive deploy workflows are implicit in the overview body rather than spelled out.

Suggestions

Add an explicit validate->fix->retry checkpoint to at least one destructive workflow in the body (e.g., after CodeDeploy: verify MinimumHealthyHosts and target-group health before declaring success, then auto-rollback on alarm), so workflow_clarity is not capped at 2.

Reduce the mild thematic overlap where CodeConnections PENDING and cross-account requirements each appear across both Critical Warnings and Common Workflows/Troubleshooting by cross-linking instead of restating.

Surface one short end-to-end sequenced workflow inline (e.g., GitHub -> CodeBuild -> CodeDeploy ECS blue/green with explicit ordered steps) so the orchestration sequence is visible without opening a reference.

Dimension	Reasoning	Score
Conciseness	Dense reference tables and concrete warnings with no concept padding (it never explains what CI/CD or a pipeline is); every line carries actionable signal, fitting the 'lean and efficient' anchor rather than the level-2 'could be tightened'.	3 / 3
Actionability	Provides concrete flags, commands, and config keys ('--ignore-application-stop-failures', 'privilegedMode: true', 'file_exists_behavior: OVERWRITE', 'codeconnections:UseConnection', 'type: SECRETS_MANAGER') that are copy-paste ready, matching the level-3 executable-guidance anchor.	3 / 3
Workflow Clarity	Service composition and Common-Workflow sequences are present, but validation checkpoints and validate->fix->retry feedback loops are only implicit in the body (full workflows live in the references), and deploys are destructive operations that the rubric says should cap at 2 without explicit checkpoints.	2 / 3
Progressive Disclosure	SKILL.md is a clear overview with a Quick Navigation table and inline links to six one-level-deep reference files, all of which exist in references/ (codepipeline, codeconnections, codebuild, codeartifact, codedeploy, troubleshooting), matching the 'clear overview with well-signaled one-level-deep references' anchor.	3 / 3
	Total	11 / 12 Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete capabilities, natural trigger terms, explicit use-when guidance, and clear boundary-setting against sibling skills. Third-person voice is maintained throughout.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions and sub-features ('Configures CI/CD pipelines', 'buildspec.yml (caching, VPC, Docker)', 'CodeDeploy strategies (blue/green, canary, linear)', 'CodeArtifact (private package registries, auth tokens, cross-account)'), matching the level-3 anchor rather than the level-2 'names domain and some actions'.	3 / 3
Completeness	Explicitly answers both what (the services and features covered) and when via the explicit trigger clause 'Applies when CodePipeline, CodeBuild, CodeDeploy, CodeConnections, CodeArtifact, buildspec.yml, appspec.yml, or CI/CD pipeline orchestration is referenced.'	3 / 3
Trigger Term Quality	Covers natural terms users would say ('CodePipeline, CodeBuild, CodeDeploy, CodeConnections, CodeArtifact, buildspec.yml, appspec.yml, CI/CD pipeline orchestration') with common variations, and uses third-person voice ('Configures', 'Applies when') rather than first/second person.	3 / 3
Distinctiveness Conflict Risk	Has a clear AWS-native CI/CD niche and an explicit 'Does NOT cover' clause redirecting to aws-containers, aws-cdk, aws-serverless, and aws-amplify, making conflict with adjacent skills unlikely.	3 / 3
	Total	12 / 12 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: aws/agent-toolkit-for-aws
Path: plugins/aws-core/skills/aws-deployment/SKILL.md
Commit: 222ce56

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.