AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
The deploy skill streamlines the process of moving applications to AWS by minimizing cognitive burden. It analyzes a codebase to identify the framework and dependencies, recommends appropriate AWS services based on established defaults, provides a monthly cost estimate, and generates secure infrastructure-as-code. The skill prioritizes cost-conscious dev-sized environments by default and integrates with specialized MCP servers for architecture knowledge, pricing, and IaC best practices.
What it does
- Scans codebases to determine the optimal AWS service stack.
- Provides monthly cost estimates for proposed infrastructure before deployment.
- Generates infrastructure-as-code with built-in security defaults.
- Performs automated security scans on generated IaC.
- Selects services based on a predefined matrix of web, database, and background task patterns.
- Handles migrations from platforms like Heroku or Render to Elastic Beanstalk.
When to use it
- When you need to deploy a new application to AWS but want to avoid manual infrastructure configuration.
- When you need a cost estimate for an AWS architecture before committing to deployment.
- When you want to ensure your infrastructure follows security best practices like encryption and least privilege.
- When migrating an existing application from a managed platform to AWS.
Advantages
- Reduces cognitive load by automating service selection and IaC generation.
- Ensures cost transparency by requiring estimates before deployment.
- Applies security defaults automatically to all generated infrastructure.
- Maintains consistency by using a standardized service selection matrix.
- Avoids deprecated services by enforcing current AWS recommendations.
Usage examples
- “Deploy my Django application to AWS.”
- The agent analyzes the Django codebase, recommends Fargate with an ALB, provides a monthly cost estimate, and generates the necessary IaC.
- “Estimate AWS cost for a static site.”
- The agent identifies the site as a static SPA, recommends Amplify Hosting, and provides a cost breakdown.
- “Generate infrastructure for my Node.js API.”
- The agent selects Fargate, calculates the monthly cost, and produces secure IaC templates.
Install
Download the skill as a ZIP:
https://autogineer.com/agent-skills/awslabs/deploy/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip deploy.zip -d .agents/skills
Documentation by AWS Labs
Deploy on AWS
Take any application and deploy it to AWS with minimal user decisions.
Philosophy
Minimize cognitive burden. User has code, wants it on AWS. Pick the most straightforward services. Don't ask questions with obvious answers.
Workflow
Analyze - Scan codebase for framework, database, dependencies
Recommend - Select AWS services, concisely explain rationale
Estimate - Show monthly cost before proceeding
Generate - Write IaC code with security defaults applied
Deploy - Run security checks, then execute with user confirmation
Defaults
See defaults.md for the complete service selection matrix.
Core principle: Default to dev-sized (cost-conscious: small instance sizes, minimal redundancy, and non-HA/single-AZ defaults) unless user says "production-ready".
MCP Servers
awsknowledge
Consult for architecture decisions. Use when choosing between AWS services or validating that a service fits the use case. Helps answer "what's the right AWS service for X?"
Key topics: general for architecture, amplify_docs for static sites/SPAs,
cdk_docs and cdk_constructs for IaC patterns.
awspricing
Get cost estimates. Always present costs before generating IaC so user can adjust before committing. See cost-estimation.md for query patterns.
awsiac
Consult for IaC best practices. Use when writing CDK/CloudFormation/Terraform to ensure patterns follow AWS recommendations.
Principles
Concisely explain why each service was chosen
Always show cost estimate before generating code
Apply security defaults automatically (encryption, private subnets, least privilege)
Run IaC security scans (cfn-nag, checkov) before deployment
Don't ask "Lambda or Fargate?" - just pick the obvious one
If genuinely ambiguous, then ask
Never recommend AWS App Runner — it is in maintenance mode. Use ECS Express Mode instead.
When user explicitly requests a managed application platform or signals low infrastructure involvement, route to Elastic Beanstalk
References
Elastic Beanstalk skill
Files
- ATTRIBUTION.mdAdded by AutoGineer897 B
- LICENSELicence file added by AutoGineer9.9 KiB
- NOTICELicence file added by AutoGineer89 B
- SKILL.md2.6 KiB
- references/cost-estimation.md6.8 KiB
- references/defaults.md6.3 KiB
- references/security.md9.4 KiB
references/defaults.md
Service Defaults
Default AWS service selections. Override only when user explicitly requests alternatives.
Compute
| App Pattern | Default | Override Trigger |
|---|---|---|
| Web framework (Django, Rails, Express, FastAPI, etc.) | Fargate + ALB | "serverless" → Lambda + API Gateway; "managed platform" or "Elastic Beanstalk" → Elastic Beanstalk |
| Static site / SPA | Amplify Hosting | "S3" or "more control" → S3 + CloudFront |
| Background workers | Fargate | Short tasks (<15min) → Lambda; "managed platform" or "Elastic Beanstalk" → Elastic Beanstalk (Worker) |
| Scheduled jobs | EventBridge + Lambda | Long-running → EventBridge + Fargate |
| API-only (no web UI) | Fargate + ALB | "serverless" → API Gateway + Lambda; "managed platform" or "Elastic Beanstalk" → Elastic Beanstalk |
| Existing Heroku/Render/Railway app migrating to AWS | Elastic Beanstalk | "container orchestration" or "ECS" → Fargate + ALB; "serverless" → Lambda |
⚠️ App Runner is in maintenance mode — AWS has moved App Runner to maintenance mode. Do not recommend App Runner for new workloads. Use ECS Express Mode instead.
Why Fargate over Lambda for web frameworks
Most web frameworks (Django, Rails, Flask with WSGI) expect long-running processes. Lambda's cold starts and request/response model require adapters and introduce latency. Fargate provides a more natural fit without framework modifications.
Why Amplify for static sites/SPAs
Amplify Hosting handles CI/CD, HTTPS, custom domains, and CDN automatically. Less configuration than S3 + CloudFront. Git-based deployments work out of the box. Use S3 + CloudFront when user needs fine-grained control over caching, edge functions, or has existing CloudFront infrastructure.
Use amplify_docs topic in awsknowledge MCP for framework-specific guidance
(React, Next.js, Vue, Angular, etc.).
Why Elastic Beanstalk for managed platform deployments
Elastic Beanstalk is an application management service: the user provides code, AWS manages deployments, scaling, patching, monitoring, and health response. Choose when the user wants production-grade reliability with the lowest ongoing maintenance cost. Choose Fargate when the user wants direct container control.
Database
| Data Pattern | Default (Dev) | Default (Prod) | Override Trigger |
|---|---|---|---|
| PostgreSQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
| MySQL | Aurora Serverless v2 | Aurora Serverless v2 | "simple RDS" → RDS |
| Document / MongoDB | Amazon DocumentDB Serverless | Amazon DocumentDB Serverless | "provisioned" → Amazon DocumentDB provisioned |
| NoSQL / Key-Value | DynamoDB | DynamoDB | - |
| Redis / Caching | ElastiCache Serverless | ElastiCache Serverless | - |
| Full-text search | OpenSearch Serverless | OpenSearch Serverless | - |
Why Aurora Serverless v2
Scales to near-zero in dev (0.5 ACU minimum), scales up automatically for production. Single choice works for both environments. Only use provisioned RDS if user has specific cost constraints or compliance requirements.
Why Amazon DocumentDB Serverless for MongoDB
Amazon DocumentDB Serverless is the on-demand, auto-scaling configuration of Amazon DocumentDB. It dynamically adjusts capacity based on application demand so you only pay for what you use. Ideal for dev/test, variable workloads, and new applications where capacity needs are unknown. Compatible with MongoDB 3.6, 4.0, 5.0 and 8.0 APIs. Use provisioned Amazon DocumentDB only when you have predictable, steady-state workloads or specific compliance requirements that need fixed instance sizing.
Storage
| Pattern | Default |
|---|---|
| Static assets | S3 |
| User uploads | S3 |
| Secrets | Secrets Manager |
| Config | Parameter Store |
IaC
| Default | Override Trigger |
|---|---|
| CDK (TypeScript) | "terraform" → Terraform |
| "cloudformation" → CloudFormation YAML | |
| "sam" → SAM |
Why CDK
Most expressive, best IDE support, generates CloudFormation. TypeScript provides
type safety without requiring Python/Java knowledge. If user's repo already has
terraform/ or cdk.json, match existing choice.
Sizing (Dev vs Production)
| Component | Dev | Production |
|---|---|---|
| Fargate | 0.5 vCPU, 1GB | 1+ vCPU, 2+ GB |
| Aurora Serverless | 0.5-2 ACU | 2-16+ ACU |
| ALB | Single AZ OK | Multi-AZ |
| Elastic Beanstalk (web) | 1x t3.small + ALB | 2-4x t3.medium + ALB, Multi-AZ |
| Elastic Beanstalk (worker) | 1x t3.small | 2-4x t3.medium |
Default to dev sizing unless user says "production", "prod", or "production-ready".
Security
See security.md for encryption, VPC placement, IAM, security group defaults, and pre-deployment security checks.
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs an MCP server
Security
No issues found by our static scan· No issues found
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Published by
- AWS Labs
- Publisher
- AWS Labs (Official)
- Source
- awslabs/agent-plugins · plugins/deploy-on-aws/skills/deploy · commit fbefb37
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- NOTICE (added by AutoGineer from NOTICE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by AWS Labs or AWS Labs.
Related skills
Deployment Strategies Terraform Specialist
Seth Hobson· Community
An expert Terraform and OpenTofu specialist for advanced infrastructure automation, state management, and enterprise-grade IaC patterns.
Cloud and DevOpsClaude CodeMITGitHub stars of the source repository42.3k
Terraform Module Library
Seth Hobson· Community
A comprehensive guide to building reusable, production-ready Terraform modules across AWS, Azure, GCP, and OCI.
Cloud and DevOpsClaude CodeClaude appsOpenAI Codex+14 moreMITGitHub stars of the source repository42.3k
Cloud Infrastructure Terraform Specialist
Seth Hobson· Community
An expert Terraform and OpenTofu specialist for advanced infrastructure automation, module design, and enterprise-grade GitOps workflows.
Cloud and DevOpsClaude CodeMITGitHub stars of the source repository42.3k
Cicd Automation Terraform Specialist
Seth Hobson· Community
An expert Terraform and OpenTofu specialist for advanced infrastructure automation, state management, and enterprise-grade GitOps workflows.
Cloud and DevOpsClaude CodeMITGitHub stars of the source repository42.3k
Terraform Azure Planning
GitHubOfficial
An expert Azure Cloud Engineering persona that generates structured Terraform implementation plans.
Cloud and DevOpsGitHub CopilotMITGitHub stars of the source repository40.9k
Terratest Module Testing
GitHubOfficial
Generate and refactor Go Terratest suites for Terraform modules with CI-safe patterns and negative-path validation.
Cloud and DevOpsGitHub CopilotMITGitHub stars of the source repository40.9k
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download deploy.zip