CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

connecting-lambda-to-api-gateway

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration, permissions, and deployment. Always use this skill when connecting Lambda to API Gateway — it handles CORS, throttling, access logging, and production security hardening that are easy to miss.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is connecting-lambda-to-api-gateway in aws/agent-toolkit-for-aws

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured overview document with exemplary progressive disclosure: a lean body that defers the full procedure to a single real, one-level-deep reference. Its weaknesses are that the body carries no executable content of its own (everything is delegated), the Overview and parameters paragraphs duplicate the description and reference, and validation checkpoints are not surfaced at the top level.

Suggestions

Add one minimal inline quick-start snippet (e.g., the first CLI command of the procedure, such as creating the REST API) so the body carries some executable guidance instead of deferring everything to the reference.

Trim the Overview paragraph, which restates the frontmatter description, and the "The procedure supports configurable authorization types..." paragraph, which duplicates content in the reference file.

Surface the procedure's validation checkpoints in the body (e.g., a one-line note that the procedure includes dependency verification, Lambda response-format validation, and an integration test before considering the setup complete).

DimensionReasoningScore

Conciseness

The body is lean overall, but the Overview paragraph ("Covers API creation, resource and method setup, Lambda proxy integration, CORS configuration, security controls, deployment, and testing") largely restates the frontmatter description, and "The procedure supports configurable authorization types (NONE, AWS_IAM, COGNITO_USER_POOLS, CUSTOM)..." duplicates reference-file content, so a couple of paragraphs could be trimmed.

4 / 5

Actionability

The main instruction is delegation ("follow the procedure exactly. See [Lambda to API Gateway connection procedure](references/lambda-gateway-api.md)") and the troubleshooting entries name concrete things to check (statusCode/headers/stringified body, lambda:InvokeFunction with source ARN, enable_cors and OPTIONS), but the body itself contains no executable commands or code — all executable detail is deferred to the reference.

3 / 5

Workflow Clarity

There is an unambiguous single entry point to a 13-step procedure, and the inline Troubleshooting section provides error-recovery mapping (502 → proxy response format, permission denied → source ARN, CORS → OPTIONS/headers). However, the body never surfaces the procedure's validation checkpoints (e.g., Verify Dependencies, Verify Lambda Response Format, Test the Integration), which live one level deep in the reference.

4 / 5

Progressive Disclosure

Clear overview, a single well-signaled one-level-deep reference (references/lambda-gateway-api.md, verified to exist with no further nested references), and appropriate content split — the 260-line procedure lives in the reference while condensed quick-troubleshooting for the three most common errors stays inline.

5 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person voice, concrete and comprehensive action coverage, an explicit 'Use when' trigger with the natural user phrasing, and a tightly scoped niche. The only weakness is slightly thin synonym coverage for trigger terms.

DimensionReasoningScore

Specificity

Phrases like "creating a REST or HTTP API with resource/method setup, Lambda proxy integration, permissions, and deployment" plus "handles CORS, throttling, access logging, and production security hardening" list multiple concrete actions covering the domain end to end, matching the comprehensive-coverage anchor.

5 / 5

Completeness

It explicitly answers "what" (create REST/HTTP API, resource/method setup, proxy integration, permissions, deployment, CORS, throttling, access logging) and "when" ("Always use this skill when connecting Lambda to API Gateway") with concrete trigger phrases, matching the top anchor exactly.

5 / 5

Trigger Term Quality

"Always use this skill when connecting Lambda to API Gateway" is the canonical user phrasing, supplemented by REST/HTTP API, CORS, and throttling. A few natural synonyms users might say ("expose a Lambda", "API endpoint", "invoke over HTTP") are missing, so it fits the good-but-not-comprehensive anchor.

4 / 5

Distinctiveness Conflict Risk

The trigger is tightly scoped to wiring an existing Lambda function to API Gateway, a clear niche with distinct trigger terms and minimal realistic overlap with other skills.

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

mreferre/aws-agent-toolkit-skills

Path

.kiro/skills/connecting-lambda-to-api-gateway/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.