Skip to main content
TalkOps Plugins Marketplace

Agent plugins (17 AWS specialist sub-agents)

Each Agent Plugin (plugins/agent-plugins/<agent>/) packages a self-contained, Principal-level AWS specialist sub-agent. Every skill, slash command, deterministic safety hook, and MCP server in the plugin is bound exclusively to that specialist (agents/<name>.md for Claude Code/TalkOps and codex/agents/<name>.toml for OpenAI Codex), so the host runtime spawns it as an isolated sub-agent without polluting your primary session's context window or tool namespace.

# Install a specialist sub-agent in TalkOps, OpsCode, or Claude Code
talkops plugin install aws-sre-agent
claude plugin install aws-sre-agent@talkops-devops-plugins

Complete directory of 17 specialist agent plugins​

Agent PluginFunction & ScaleBound MCP ServersWhat It Does
aws-iac-engineerBuild & deliver
12 skills		aws-mcp, awsiac, terraform, pulumiMulti-engine AWS IaC (CDK, CloudFormation, Terraform/OpenTofu, Pulumi, Crossplane), FinOps cost estimates, brownfield imports, and CI/CD & GitOps pipelines.
aws-deployment-engineerBuild & deliver
9 skills		awsknowledge, awsiac, awspricing, awsapi, cloudwatchCodebase discovery → hosting architecture → pre-deploy cost estimate → IaC scaffolding → deployment verification & rollback.
aws-serverless-engineerBuild & deliver
24 skills		aws-serverless-mcp, aws-documentation-mcp, aws-dynamodb-mcp, aws-sns-sqs-mcp, aws-cloudwatch-mcp, aws-billing-cost-mcp + connectorsLambda (SnapStart, Power Tuning, Durable Functions, Managed Instances), API Gateway, Step Functions, EventBridge, SQS/SNS, DynamoDB, Aurora DSQL, and SAM/CDK.
aws-amplify-engineerBuild & deliver
9 skills		aws-mcp, awsknowledge, appsync, awsiac, dynamodb, cloudwatchAmplify Gen 2 TypeScript-first full-stack web & mobile apps: Cognito Auth, AppSync Data, S3 Storage, Functions, Custom CDK, and Hosting CI/CD.
aws-location-engineerBuild & deliver
6 skills		aws-mcp, awslocationMaps, geocoding, places search, route calculation/matrix, geofencing, and device tracking with Amazon Location Service V2.
aws-platform-engineerPlatform & ops
33 skills		aws-mcp, aws-iac, iam, cloudwatch, cloudtrail, pricing, billing-cost, well-architected-security, eks, ecs, serverless, awsnetwork, finch, sns-sqs, mqEC2, Golden AMIs, EKS (Auto Mode, Karpenter, Pod Identity), ECS Fargate, multi-AZ VPC/TGW/Cloud WAN networking, S3/EFS/FSx storage, and Golden Path landing zones.
aws-sre-agent
(Read-Only)		Platform & ops
29 skills		aws-mcp (--read-only), aws-api, cloudwatch, appsignals, prometheus, cloudtrail, eks, ecs, network, iac, cost-explorer, awssupportCloudWatch, Application Signals APM, X-Ray, CloudTrail forensics, Managed Prometheus/Grafana, EKS/ECS/VPC/DB reliability, FIS chaos, ARC zonal shift, and COE postmortems.
aws-devsecops-engineerPlatform & ops
18 skills · 11 cmds		aws-mcp, aws-security-agent, aws-cloudwatch, aws-cloudtrail, aws-well-architected-security, aws-billingLive incident RCA, Security Hub CSPM triage, least-privilege IAM, IaC/perimeter hardening, AWS Security Agent SAST/DAST/pentest scans, release gates, and FinOps guardrails.
aws-cloud-security-engineerSecurity & cost
9 skills		aws-mcp, iam, wa-security, cloudtrail, awsiac, cloudwatch, awsnetworkIAM & SCPs/RCPs, KMS & Secrets Manager data protection, Security Hub OCSF CSPM, GuardDuty & CloudTrail incident response, WAF/Network Firewall perimeter, and container security.
aws-finops-engineer
(Read-Only)		Security & cost
2 skills (18 refs)		aws-mcp (--read-only), billing, awspricing, cloudwatch, awsiacCost Explorer & Anomaly Detection, CUR 2.0 Athena SQL analytics, Compute Optimizer P95/P99 rightsizing, Savings Plans/RI modeling, Shift-Left IaC cost estimation, and waste elimination.
aws-solutions-architect
(Read-Only)		Architecture
24 skills		aws-mcp (--read-only), awsknowledge, awspricing, iac, bcm, tm, drawioWell-Architected 6-pillar reviews, ADRs, STRIDE threat modeling, Draw.io architecture diagrams, multi-account Landing Zones, multi-region DR tiers, and Bedrock/ML architecture.
aws-startup-advisorArchitecture
14 skills · 1 cmd		aws-mcp, aws-pricing, aws-billingStage-aware Pre-Seed to Series B architecture, account hygiene audits, Azure/GCP/Heroku → AWS migrations, OpenAI/Anthropic → Bedrock migrations, and AWS Activate optimization.
aws-data-engineerData & AI
25 skills		aws-mcp, dataprocessing, redshift, s3tables, cloudwatch, spark-troubleshootingS3 Tables (Apache Iceberg), AWS Glue (Catalog, Spark ETL, DQDL Data Quality), Lake Formation governance, Athena, Redshift, Kinesis/MSK streaming, MWAA, OpenSearch, and DataZone.
aws-database-engineerData & AI
18 skills		awsknowledge, aws-mcp, dynamodb, cloudwatch, postgres, mysql, elasticache, awspricing + connectorsWorkload-driven DB selection, Aurora (PostgreSQL/MySQL/DSQL), RDS, DynamoDB single-table design, ElastiCache (Valkey/Redis), DocumentDB, Keyspaces, Neptune, Performance Insights, and DMS.
aws-agentcore-engineerData & AI
9 skills		aws-mcp, awsknowledge, agentcore, strands-agents, cloudwatch, appsignals, cloudtrailBuild, connect, deploy, harden, debug, evaluate, and optimize production AI agents on Amazon Bedrock AgentCore (Runtime, Gateway, Memory, Identity, Observability) & Strands Agents.
aws-sagemaker-engineerData & AI
30 skills		aws-mcp, sagemaker, awspricing, awsiac, cloudwatchEnd-to-end ML engineering on Amazon SageMaker AI: distributed training, HyperPod clusters, Bedrock/SageMaker fine-tuning, vLLM/LMI inference endpoints, MLOps Pipelines, and cost/endpoint triage.
aws-modernization-agentModernization
13 skills		aws-transform-mcp, aws-mcp, awsiac, postgres7Rs portfolio assessment, Strangler Fig decomposition, AWS Transform (.NET, Java, mainframe COBOL, SQL Server), VMware MGN replatforming, DMS cutover, and parity verification.

Specialist breakdown by engineering function​

1. Build & deliver (5 agents)​

aws-iac-engineer — AWS IaC Engineer​

  • Skills: 12 (aws-cdk-development, aws-cloudformation, terraform-aws-iac, pulumi-aws-iac, crossplane-aws-engineer, aws-cost-estimation, brownfield imports, CI/CD & GitOps pipelines)
  • MCP servers: aws-mcp, awsiac, pulumi + optional terraform connector (hashicorp/terraform-mcp-server)
  • Hooks: secret-safety.py, aws-mutation-gate.py, and iac-post-write-lint.py (PostToolUse automatic cfn-lint, cfn-guard, and terraform validate)
  • Best for: Multi-engine Infrastructure as Code authoring, refactoring, policy-as-code validation, and pre-deployment FinOps cost estimates.

aws-deployment-engineer — AWS Deployment Engineer​

  • Skills: 9 (recommend-aws-architecture, estimate-aws-cost, aws-cdk, aws-cloudformation, aws-compute, aws-containers, aws-serverless, aws-deployment, signing-in-to-aws)
  • MCP servers: awsknowledge, awsiac, awspricing, awsapi, cloudwatch
  • Best for: Taking an application repository from codebase discovery to hosting architecture selection, pre-deploy cost modeling, IaC scaffolding, and rollout/rollback verification.

aws-serverless-engineer — AWS Serverless Engineer​

  • Skills: 24 (Lambda SnapStart, Power Tuning, Durable Functions, Managed Instances, MicroVMs, Web Adapter, API Gateway, Step Functions, EventBridge Buses/Pipes/Scheduler, SQS/SNS, Event Source Mappings, DynamoDB single-table design, Aurora DSQL, SAM/CDK)
  • MCP servers: aws-serverless-mcp, aws-documentation-mcp, aws-dynamodb-mcp, aws-sns-sqs-mcp, aws-cloudwatch-mcp, aws-billing-cost-mcp + optional aurora-dsql, lambda-tool, and stepfunctions-tool connectors
  • Best for: Event-driven and serverless architecture, cold-start tuning, Step Functions orchestration, and SAM/CDK serverless deployments.

aws-amplify-engineer — AWS Amplify Engineer​

  • Skills: 9 (Amplify Gen 2 TypeScript-first Auth with Cognito, Data with AppSync GraphQL, Storage with S3, Functions, Custom CDK escape hatches, Hosting CI/CD, AI Kit, and AWS Blocks)
  • MCP servers: aws-mcp, awsknowledge, appsync, awsiac, dynamodb, cloudwatch
  • Best for: Full-stack web and mobile application engineering on AWS Amplify Gen 2.

aws-location-engineer — AWS Location Engineer​

  • Skills: 6 (Amazon Location Service V2 Maps, Geocoding, Places Search, Route Calculation & Matrix, Geofencing, and Device Tracking)
  • MCP servers: aws-mcp, awslocation
  • Best for: Geospatial, mapping, routing, and fleet/asset tracking features on AWS.

2. Platform & operations (3 agents)​

aws-platform-engineer — AWS Platform Engineer​

  • Skills: 33 (EC2 Graviton4 & Golden AMIs, EKS Auto Mode/Karpenter/Pod Identity/VPC CNI, ECS Fargate & Express Mode, multi-AZ VPC/Transit Gateway/Cloud WAN/VPC Lattice/IPAM, S3/EFS/FSx/Backup Vault Lock, MSK/MQ/SNS/SQS, and multi-account Control Tower Landing Zones)
  • MCP servers: aws-mcp, aws-iac, iam, cloudwatch, cloudtrail, pricing, billing-cost, well-architected-security, eks, ecs, serverless, awsnetwork, finch, sns-sqs, mq
  • Best for: Core cloud platform engineering across compute, containers, enterprise networking, storage, and multi-account landing zones.

aws-sre-agent — AWS SRE Agent (Read-Only)​

  • Skills: 29 (Live-site incident command & COE postmortems, CloudWatch Metrics/Alarms/Logs Insights, Application Signals SLOs, X-Ray traces, Managed Prometheus PromQL & Grafana, CloudTrail change forensics, EKS/ECS/RDS/VPC troubleshooting, Resilience Hub v2, Fault Injection Service chaos experiments, and Route 53 ARC Zonal Shift/Region Switch)
  • MCP servers: aws-mcp (--read-only), aws-api, cloudwatch, appsignals, prometheus, cloudtrail, eks, ecs, network, iac, cost-explorer, awssupport
  • Safety posture: Strictly read-only on AWS—aws-mcp runs with --read-only and aws-mutation-gate.py denies mutating shell or MCP calls.
  • Best for: Production incident triage, cross-signal root-cause analysis, SLO burn-rate diagnostics, and chaos/resilience engineering.

aws-devsecops-engineer — AWS DevSecOps Engineer​

  • Skills: 18 + 11 slash commands (accounts, cost, harden, iam, investigate, pentest, posture, release-readiness, release-testing, scan, setup)
  • MCP servers: aws-mcp, aws-security-agent, aws-cloudwatch, aws-cloudtrail, aws-well-architected-security, aws-billing
  • Best for: Shift-left CI/CD release gates, AWS Security Agent SAST/DAST/pentest scans, Security Hub CSPM triage, least-privilege IAM hardening, and live DevSecOps incident investigation.

3. Security & cost (2 agents)​

aws-cloud-security-engineer — AWS Cloud Security Engineer​

  • Skills: 9 (IAM least-privilege & Access Analyzer, Organizations SCPs/RCPs/Declarative Policies, KMS & Secrets Manager data protection, Security Hub OCSF CSPM, GuardDuty & CloudTrail incident response, WAF/Shield Advanced/Network Firewall perimeter defense, and EKS/ECS container security)
  • MCP servers: aws-mcp, iam, wa-security, cloudtrail, awsiac, cloudwatch, awsnetwork
  • Best for: Deep cloud security audits, IAM policy synthesis, perimeter defense, and GuardDuty/CloudTrail forensics.

aws-finops-engineer — AWS FinOps Engineer (Read-Only)​

  • Skills: 2 comprehensive FinOps suites (aws-billing-and-cost-management with 18 deep reference modules + signing-in-to-aws)
  • MCP servers: aws-mcp (--read-only), billing, awspricing, cloudwatch, awsiac
  • Hooks: Includes finops-sql-and-cost-gate.py to enforce Athena CUR 2.0 partition filters and prevent runaway query scan costs.
  • Best for: 7-stage forensic cloud cost audits, CUR 2.0 / FOCUS Athena SQL analytics, Compute Optimizer P95/P99 right-sizing, Savings Plans/RI portfolio modeling, and waste elimination.

4. Architecture & advisory (2 agents)​

aws-solutions-architect — AWS Solutions Architect (Read-Only)​

  • Skills: 24 (AWS Well-Architected 6-Pillar reviews, MADR 3.0 Architecture Decision Records, STRIDE threat modeling, Draw.io & Mermaid architecture diagrams, multi-account Landing Zones, multi-region DR tiers, and Bedrock/ML architecture)
  • MCP servers: aws-mcp (--read-only), awsknowledge, awspricing, iac, bcm, tm (Threat Modeling), drawio
  • Best for: Principal-grade architecture reviews, ADR generation, threat modeling, cost-backed design proposals, and Draw.io diagram synthesis.

aws-startup-advisor — AWS Startup Advisor​

  • Skills: 14 + 1 command (usage-data) (Stage-aware Pre-Seed to Series B architecture, startup account security/billing hygiene audits, Azure/GCP/Heroku/Vercel → AWS migrations, OpenAI/Anthropic/OpenRouter → Bedrock migrations, and AWS Activate credit optimization)
  • MCP servers: aws-mcp, aws-pricing, aws-billing
  • Best for: High-velocity startup teams optimizing runway, migrating from PaaS providers to AWS, andstretching AWS Activate credits.

5. Data & AI (4 agents)​

aws-data-engineer — AWS Data Engineer​

  • Skills: 25 (S3 Tables with Apache Iceberg, AWS Glue Data Catalog/Spark ETL/DQDL Data Quality, Lake Formation governance, Athena, Redshift serverless & provisioned tuning, Kinesis/MSK streaming, MWAA Airflow, OpenSearch, DataZone, and system-table auditing)
  • MCP servers: aws-mcp, dataprocessing, redshift, s3tables, cloudwatch, spark-troubleshooting
  • Best for: Lakehouse architecture, Apache Spark job debugging, Redshift/Athena optimization, and data governance.

aws-database-engineer — AWS Database Engineer​

  • Skills: 18 (Workload-driven DB selection, Aurora PostgreSQL/MySQL/DSQL, RDS across all 6 engines, DynamoDB single-table design, ElastiCache Valkey/Redis/Memcached, DocumentDB, Keyspaces, Neptune, Timestream for InfluxDB, Performance Insights wait-event triage, Blue/Green deployments, and DMS migrations)
  • MCP servers: awsknowledge, aws-mcp, dynamodb, cloudwatch, postgres, mysql, elasticache, awspricing + 9 optional database connectors (aurora-dsql, documentdb, keyspaces, memcached, mssql, neptune, oracle, timestream-influxdb, valkey)
  • Best for: Database modeling, slow-query and wait-event diagnostics, zero-downtime Blue/Green upgrades, and heterogeneous database migrations.

aws-agentcore-engineer — AWS AgentCore Engineer​

  • Skills: 9 (Amazon Bedrock AgentCore agents-build, agents-connect, agents-deploy, agents-harden, agents-debug, agents-evaluate, agents-optimize, agents-pay, and Strands Agents SDK)
  • MCP servers: aws-mcp, awsknowledge, agentcore, strands-agents, cloudwatch, appsignals, cloudtrail
  • Best for: Building, deploying, securing, and observing production AI agents on Amazon Bedrock AgentCore (Runtime, Gateway, Memory, Identity, Code Interpreter, Browser) and Strands Agents.

aws-sagemaker-engineer — AWS SageMaker Engineer​

  • Skills: 30 (Distributed training, SageMaker HyperPod clusters, Bedrock & SageMaker fine-tuning, vLLM/LMI/DJL inference endpoints, SageMaker MLOps Pipelines, Model Registry, cost estimation, and endpoint latency/OOM triage)
  • MCP servers: aws-mcp, sagemaker, awspricing, awsiac, cloudwatch
  • Best for: End-to-end machine learning and LLM training, fine-tuning, and inference operations on Amazon SageMaker AI.

6. Migration & modernization (1 agent)​

aws-modernization-agent — AWS Modernization Agent​

  • Skills: 13 (7 Rs portfolio assessment, Strangler Fig monolith decomposition, AWS Transform for .NET, Java, mainframe COBOL, and SQL Server, AWS Application Migration Service MGN, DMS schema conversion & CDC cutover, and parity verification)
  • MCP servers: aws-transform-mcp, aws-mcp, awsiac, postgres
  • Best for: Enterprise legacy modernization, mainframe/monolith decomposition, and database engine replatforming.
On this page