aws-resource-query
Query AWS resources using natural language. Covers EC2, S3, RDS, Lambda, ECS, EKS, Secrets Manager, IAM, VPC, networking, messaging, and more. Strictly read-only — no writes, deletes, or mutations.
Profile →npx skills add github/awesome-copilot --skill aws-resource-query --agent copilot
Same command for any agent — swap --agent for claude-code, codex, cursor.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
What it does
Answer natural language questions about AWS resources by translating intent into read-only AWS CLI commands. This skill never runs commands that create, modify, or delete resources.
How it works
Follows a Safety Contract restricting to read-only commands: aws <service> describe-, aws <service> list-, aws <service> get-, aws sts get-caller-identity, aws configure get, aws resourcegroupstaggingapi get-resources, aws ce get-, aws support describe-*. If a query implies a write action, it responds with a read-only message. The workflow includes: Step 1 parse intent for target services and scope, Step 2 confirm account & region via aws sts get-caller-identity and aws configure get, Step 3 execute matched read-only commands and format results as a readable table. Command mapping shows concrete aws CLI commands for various services (EC2, Lambda, ECS, EKS, S3, RDS, DynamoDB, IAM, Secrets Manager, SSM, KMS, ACM, etc.).
When to use it
Use when you need to inspect AWS resources without making changes; it will describe/list/get resources depending on the natural language query, and prepend region if provided.
What it can touch
Commands restricted to read-only operations: describe-, list-, get-, sts get-caller-identity, configure get, resourcegroupstaggingapi get-resources, ce get-, support describe-*. No write or delete operations are performed.
Caveats
No explicit license notes beyond MIT in the folder metadata. Safety contract enforces read-only behavior and explicit refusal if a write action would be attempted.
# AWS Resource Query Answer natural language questions about AWS resources by translating intent into read-only AWS CLI commands. This skill **never** runs commands that create, modify, or delete resources. ## Safety Contract **STRICTLY READ-ONLY.** This skill exclusively uses: - `aws <service> describe-*` - `aws <service> list-*` - `aws <service> get-*` - `aws sts get-caller-identity` - `aws configure get` - `aws resourcegroupstaggingapi get-resources` - `aws ce get-*` - `aws support describe-*` **NEVER** run any of the following, regardless of what the user asks: `create-*`, `run-*`, `start-*`, `stop-*`, `reboot-*`, `delete-*`, `terminate-*`, `put-*`, `update-*`, `modify-*`, `attach-*`, `detach-*`, `send-*`, `publish-*`, `invoke-*`, `execute-*` If the user's query implies a write action, respond: > "This skill is read-only. I can show you the current state of [resource], but I cannot [create/modify/delete] it. Would you like to see what currently exists?" ## Workflow ### Step 1: Parse Intent Identify: target service(s), scope (all / filtered / specific), detail level, and region. ### Step 2: Confirm Account & Region ```bash aws sts get-caller-identity --query '{Account:Account,Us
- Safety Contract
- Workflow
- Step 1: Parse Intent
- Step 2: Confirm Account & Region
- Step 3: Execute & Format
- Intent → Command Mapping
- COMPUTE
- STORAGE
- DATABASES
- NETWORKING
- SECURITY & IDENTITY
- MESSAGING & EVENTS
- API GATEWAY & SERVERLESS
- MONITORING & OBSERVABILITY
aws sts get-caller-identity --query '{Account:Account,UserId:UserId}'
aws configure get region
aws ec2 describe-instances \
aws ec2 describe-instances --filters Name=instance-state-name,Values=running \
aws ec2 describe-instances --filters Name=instance-state-name,Values=stopped \
aws ec2 describe-instances --query 'Reservations[].Instances[].InstanceType' --output text | sort | uniq -c | sort -rn
aws autoscaling describe-auto-scaling-groups \
aws ec2 describe-addresses \
aws ec2 describe-key-pairs \
aws ec2 describe-images --owners self \What does the aws-resource-query skill do?
Query AWS resources using natural language. Covers EC2, S3, RDS, Lambda, ECS, EKS, Secrets Manager, IAM, VPC, networking, messaging, and more. Strictly read-only — no writes, deletes, or mutations.
How do I install it?
Run `npx skills add github/awesome-copilot --skill aws-resource-query --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From github/awesome-copilot, a repository with 37,432 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.