Skills aws-solution-architect

📦

aws-solution-architect

Name: aws-solution-architect
Author: alirezarezvani

Content revision r1 Medium Risk ⚡ Contains scripts⚙️ External commands🌐 Network access

Design AWS Startup Architectures

Early teams need AWS designs that balance speed, security, scale, and cost. This skill turns product requirements into practical AWS architecture guidance and infrastructure templates.

Supports: Claude Codex Code(CC)

📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "aws-solution-architect" from https://skillstore.io/skills/alirezarezvani-aws-solution-architect.md and its manifest at https://skillstore.io/api/skills/alirezarezvani-aws-solution-architect/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/alirezarezvani-aws-solution-architect.md Signed manifest GET /api/skills/alirezarezvani-aws-solution-architect/manifest Signed lockfile GET /api/skills/alirezarezvani-aws-solution-architect/lockfile

Test it

Using "aws-solution-architect". Design an MVP backend for a mobile app with authentication and simple data storage.

Expected outcome:

A serverless design using Cognito, API Gateway, Lambda, DynamoDB, CloudWatch, and S3. The response explains why each service fits an MVP and gives an estimated monthly cost range.

Using "aws-solution-architect". Help reduce AWS costs for a growing SaaS platform.

Expected outcome:

Review NAT Gateway usage and consider VPC endpoints.
Set CloudWatch log retention policies.
Use Savings Plans for predictable compute.
Tag resources for cost allocation and ownership.

Using "aws-solution-architect". Create a production readiness checklist for a generated serverless stack.

Expected outcome:

A checklist covering IAM least privilege, CORS restrictions, encryption, CloudTrail, alarms, backup policy, deployment rollback, and environment separation.

Security Audit

Medium Risk

v8 • 7/9/2026 Open versioned report

The static findings are false positives caused by Markdown formatting, generated IaC syntax, AWS resource URLs, and architecture guidance. No evidence of prompt injection, credential exfiltration, shell execution, or malicious reconnaissance was found. One medium-risk semantic issue remains: generated API Gateway CORS settings are too broad for production use.

Files scanned

2,549

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

serverless_stack.py:315-317

Generated API Allows Broad CORS Access

The generated CDK API Gateway configuration allows all origins and all methods. If deployed without narrowing these settings, browser clients from any origin could invoke allowed API methods and increase exposure.

The CDK template explicitly uses all origins and all methods for CORS. This is a common development default that can be risky in production, although Cognito authorization reduces impact.

Risk Factors

⚡ Contains scripts (1)

serverless_stack.py:294

⚙️ External commands (9)

serverless_stack.py:254 serverless_stack.py:266 serverless_stack.py:295 serverless_stack.py:313 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71

🌐 Network access (7)

serverless_stack.py:210 SKILL.md:337 SKILL.md:338 SKILL.md:339 SKILL.md:340 SKILL.md:343 SKILL.md:344

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/alirezarezvani-aws-solution-architect/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/alirezarezvani-aws-solution-architect/security.svg)](https://skillstore.io/skills/alirezarezvani-aws-solution-architect?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/alirezarezvani-aws-solution-architect?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alirezarezvani-aws-solution-architect/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/alirezarezvani-aws-solution-architect.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

alirezarezvani. (2026). aws-solution-architect security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alirezarezvani-aws-solution-architect/audits/8

BibTeX citation

@techreport{alirezarezvani-alirezarezvani-aws-solution-architect-2026,
  author = {alirezarezvani},
  title = {aws-solution-architect security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/alirezarezvani-aws-solution-architect/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aws-solution-architect security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "alirezarezvani"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/alirezarezvani-aws-solution-architect/audits/8"
identifiers:
  - type: other
    value: "skillstore:alirezarezvani-aws-solution-architect:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan an MVP backend

Choose a low-cost serverless AWS stack for a new product with authentication, API, storage, and monitoring.

Prepare for growth

Evolve an existing architecture for more users, higher reliability, better observability, and controlled monthly spend.

Generate deployment templates

Create CloudFormation, CDK, or Terraform starting points for serverless applications using Lambda, API Gateway, DynamoDB, and Cognito.

Try These Prompts

Beginner architecture request

Design a simple AWS architecture for a new web application with user login, a REST API, and low monthly cost. Explain each service choice.

Cost-aware serverless design

Design a serverless AWS backend for 50,000 monthly active users with a monthly budget under $500. Include cost drivers and tradeoffs.

Infrastructure template generation

Generate an AWS CDK architecture plan for a Lambda, API Gateway, DynamoDB, and Cognito backend. Include security settings to review before deployment.

Advanced scale and compliance review

Review this AWS architecture for 100,000 users, GDPR requirements, and multi-region resilience. Recommend changes for security, reliability, cost, and operations.

Best Practices

Provide traffic, budget, compliance, and team experience details before asking for an architecture.
Review generated infrastructure templates with cloud and security owners before deployment.
Ask for cost, reliability, and security tradeoffs when comparing AWS service choices.

Avoid

Do not deploy generated templates without checking IAM, CORS, retention, and environment settings.
Do not ask for a large-scale architecture without current usage, latency, and budget constraints.
Do not treat cost estimates as final quotes without checking current AWS regional pricing.