configuring-vpc-endpoints-for-private-aws-service-access

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The SKILL.md body is a well-structured overview that delegates the detailed procedure to a single real reference file, which itself contains executable code, a sequenced workflow with validation checkpoints, and concrete troubleshooting. This is a textbook progressive-disclosure layout with no redundancy.

Dimension	Reasoning	Score
Conciseness	The body is lean — it assumes Claude's competence, avoids explaining what VPCs or endpoints are, and delegates detail to a single reference rather than padding the overview.	3 / 3
Actionability	The referenced procedure supplies copy-paste-ready AWS CLI commands plus Python/Java/JavaScript integration code, and the inline troubleshooting gives concrete checks (security groups, DNS hostnames, port 443, route tables).	3 / 3
Workflow Clarity	The referenced 12-step SOP sequences validation checkpoints (confirm parameters, validate VPC/subnets, verify endpoint status, wait for Available state) with feedback loops before proceeding to creation and testing.	3 / 3
Progressive Disclosure	A concise overview points to one clearly signaled, one-level-deep reference (references/configure-vpc-endpoints-for-private-aws-service-access.md, verified present) with troubleshooting kept inline — easy to navigate.	3 / 3
	Total	12 / 12 Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, trigger-rich, and complete, naming concrete actions and an explicit "Use when" clause scoped to a distinctive AWS networking niche. It avoids vague fluff and would be hard to confuse with other skills.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions — "Configures VPC endpoints (interface and gateway)" and "Covers endpoint creation, security groups, route tables, and DNS configuration" — matching the multi-action anchor.	3 / 3
Completeness	Clearly answers what ("Configures VPC endpoints...") and when via an explicit "Use when setting up secure private connectivity..." trigger clause.	3 / 3
Trigger Term Quality	Surfaces natural terms users would say — "VPC endpoints", "S3", "DynamoDB", "AWS services", "internet gateway", "NAT device", "public IP addresses", "AWS PrivateLink" — with good coverage rather than jargon.	3 / 3
Distinctiveness Conflict Risk	Occupies a clear niche (private AWS service access via PrivateLink) with distinct triggers, unlikely to fire for unrelated skills.	3 / 3
	Total	12 / 12 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: aws/agent-toolkit-for-aws
Path: skills/specialized-skills/networking-and-content-delivery-skills/configuring-vpc-endpoints-for-private-aws-service-access/SKILL.md
Commit: 222ce56

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.