CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

enabling-lambda-vpc-internet-access

Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet routing, and updating security groups. Use when a VPC-attached Lambda function cannot reach the internet.

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

The canonical home for this skill is enabling-lambda-vpc-internet-access in aws/agent-toolkit-for-aws

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured progressive-disclosure skill: a lean overview pointing to a real, well-sequenced, executable reference procedure, plus useful inline troubleshooting triage. Main costs are token efficiency — an overview paragraph teaching known VPC/NAT concepts and a troubleshooting section duplicated from the reference — and the absence of an explicit end-to-end verification step.

Suggestions

Trim the Overview to skill-specific framing only: Claude already knows that VPC Lambdas lack public IPs and that NAT + Internet Gateway is the standard egress path, so the second sentence ('Lambda functions in a VPC cannot receive public IP addresses, so outbound internet access requires...') can be cut.

Deduplicate the Troubleshooting section: the same four scenarios appear verbatim in references/lambda-vpc-internet-access.md — keep either the inline bullets or the reference section, and reduce the other to one-line pointers.

Add an explicit final validation step to the procedure (e.g., re-invoke the Lambda function and confirm outbound reachability, then only report success) so the workflow closes with a verification checkpoint.

DimensionReasoningScore

Conciseness

The Overview re-explains concepts Claude already knows ("Lambda functions in a VPC cannot receive public IP addresses, so outbound internet access requires NAT Gateway infrastructure that routes traffic from private subnets through a public subnet to an Internet Gateway"), and the four inline Troubleshooting bullets duplicate a near-identical Troubleshooting section in the reference file. Mostly efficient overall, but these sections could be tightened or deduplicated.

3 / 5

Actionability

The body itself contains no commands, but it cleanly delegates to an executable CLI procedure ("follow the procedure exactly. See [Lambda VPC internet access setup procedure]...") and its inline checks are concrete ("route table associated with the Lambda subnets has a `0.0.0.0/0` route pointing to the NAT Gateway"). This is mostly executable guidance with a minor gap — e.g., the promised "updating security groups" detail lives only in the reference.

4 / 5

Workflow Clarity

The referenced procedure is clearly sequenced (9 numbered steps) with checkpoints including "Verify Dependencies" and "Confirm Infrastructure Changes with User", and the Troubleshooting section supplies feedback loops (check route table, wait 1–2 minutes for propagation, retest). Minor validation gap: no explicit final step verifying the Lambda function's outbound connectivity after the changes.

4 / 5

Progressive Disclosure

Scored against the actual bundle: the body is a concise overview with a single, clearly signaled, one-level-deep reference (references/lambda-vpc-internet-access.md), which exists and contains the full 249-line procedure; no nesting and easy navigation, matching the clear-overview anchor.

5 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete, third-person, and specific about both capabilities and trigger conditions, with a genuinely natural trigger phrase. Only weakness is slightly thin synonym coverage for how users phrase the problem (missing terms like 'outbound' or 'egress').

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions — "creating NAT Gateway infrastructure, configuring public/private subnet routing, and updating security groups" — which comprehensively cover the task's scope, matching the anchor for comprehensive coverage rather than the anchor-4 case with minor gaps.

5 / 5

Completeness

Explicitly answers both questions: what it does ("Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure...") and when to use it ("Use when a VPC-attached Lambda function cannot reach the internet"), matching the anchor with concrete trigger phrases rather than the anchor-4 case of a less explicit 'when'.

5 / 5

Trigger Term Quality

Good natural keyword coverage: "internet access", "AWS Lambda", "VPC", "NAT Gateway", and the especially natural trigger phrase "cannot reach the internet". A few plausible user phrasings are missing (e.g., "outbound", "egress", "no internet"), so it falls just short of the comprehensive-synonyms anchor.

4 / 5

Distinctiveness Conflict Risk

A clear niche (Lambda + VPC + internet egress) with distinct triggers like "VPC-attached Lambda function cannot reach the internet"; virtually no overlap with other skills, matching the minimal-conflict-risk anchor.

5 / 5

Total

19

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

mreferre/aws-agent-toolkit-skills

Path

.kiro/skills/enabling-lambda-vpc-internet-access/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.