Vertical & partner-built plugins
When you want deep AWS domain expertise, multi-phase slash-command playbooks, and MCP servers attached directly to your main agent—with zero sub-agent hand-off—install a Vertical Plugin (plugins/vertical-plugins/<domain>/) or Partner-Built Plugin (plugins/partner-built/<plugin>/).
Across the 21 AWS Vertical Plugins, you get 245 domain skills and 109 multi-phase operational slash commands, all protected by bundled secret-safety.py and aws-mutation-gate.py PreToolUse hooks.
# Install a vertical plugin in TalkOps, OpsCode, or Claude Code
talkops plugin install aws-networking
claude plugin install aws-networking@talkops-devops-plugins
- Automatic skill activation: Skills activate automatically from their descriptions or explicitly via
/<plugin>:<skill>. - Multi-phase operational playbooks: Run structured operational workflows via
/<plugin>:<command>(for example,/aws-networking:trace-connectivity,/aws-databases:troubleshoot-db, or/aws-observability:triage-incident).
Complete index of 21 AWS vertical plugins (245 skills · 109 commands)
| Vertical Plugin | Slash Commands (/<plugin>:<cmd>) | Bundled MCP Servers | Capabilities & Specialist Alternative |
|---|---|---|---|
aws-essentials(Foundation · 6 skills) | account-baseline-audit · sdk-snippet · setup-auth · troubleshoot-auth · whoami | aws-mcp, awsknowledge, awsapi | Credential & SSO preflight verification, account baseline security/billing hygiene audits, and SDK best practices (Boto3, JS/TS v3, Swift). Agents: aws-solutions-architect, aws-startup-advisor |
aws-infrastructure-as-code(Build · 16 skills) | bootstrap-app · brownfield-import · compare-iac-tools · generate-iac · troubleshoot-deploy · validate-stack | aws-mcp, awsknowledge, awsiac, awspricing, pulumi + connectors | End-to-end AWS IaC & deployment: CDK, CloudFormation, Terraform/OpenTofu, Pulumi, Crossplane/ACK, brownfield import, preflight discovery, verification/rollback. Agents: aws-iac-engineer, aws-deployment-engineer |
aws-serverless(Build · 26 skills) | api-gateway-design · configure-event-bus · debug-invocation · optimize-cold-starts · orchestrate-workflow · scaffold-function | aws-mcp, aws-serverless-mcp, awsknowledge, dynamodb, sns-sqs, cloudwatch, billing + connectors | AWS Lambda (SnapStart, Power Tuning, Durable Functions, Managed Instances), API Gateway, Step Functions, EventBridge, SQS/SNS, DynamoDB, Aurora DSQL, SAM/CDK. Agents: aws-serverless-engineer, aws-platform-engineer |
aws-web-and-mobile(Build · 14 skills) | amplify-gen2-deploy · amplify-init · configure-auth · graphql-api · location-maps-and-geofencing | aws-mcp, awsknowledge, appsync, awslocation, awsiac, dynamodb, cloudwatch | Full-stack web, mobile, and geospatial engineering: AWS Amplify Gen 2 (Auth/Cognito, Data/AppSync, Functions/CDK, Storage/S3, Hosting CI/CD), AWS Blocks, Location V2. Agents: aws-amplify-engineer, aws-location-engineer |
aws-compute(Platform · 6 skills) | beanstalk-ops · configure-asg · golden-ami-pipeline · launch-instance · rightsize-fleet | aws-mcp, awsknowledge, cloudwatch, awspricing, awsiac | EC2 and PaaS compute: instance family selection (Graviton4, compute/memory/GPU), Auto Scaling Groups, EC2 Image Builder golden AMIs, Elastic Beanstalk, right-sizing. Agents: aws-platform-engineer, aws-sre-agent |
aws-containers(Platform · 5 skills) | build-push-image · container-security-audit · ecs-troubleshoot · eks-troubleshoot · karpenter-rightsize | aws-mcp, eks, ecs, finch, cloudwatch, awspricing, awsiac | Production container operations: Amazon EKS (Auto Mode, Karpenter, Pod Identity, VPC CNI, CoreDNS), Amazon ECS (Fargate, Express Mode, circuit breakers), ECR, runtime security. Agents: aws-platform-engineer, aws-sre-agent |
aws-networking(Platform · 18 skills) | audit-vpc · design-hub-spoke · harden-network-perimeter · trace-connectivity · troubleshoot-dns | aws-mcp, awsnetwork, cloudwatch, awsiac, awsknowledge | Multi-AZ VPC design, Transit Gateway, Cloud WAN, VPC Lattice, IPAM, PrivateLink, Direct Connect, Site-to-Site VPN, Route 53, CloudFront, WAF, Shield Advanced, Network Firewall. Agents: aws-platform-engineer, aws-solutions-architect |
aws-storage(Platform · 6 skills) | audit-s3-security · backup-and-replication-plan · optimize-storage-tiers · troubleshoot-efs | aws-mcp, s3tables, cloudwatch, awspricing, awsiac | Amazon S3 (Storage Lens, Intelligent-Tiering, Object Lock, S3 Tables), EFS performance & mount triage, EBS gp3/io2, FSx, AWS Backup vault lock, KMS, cross-region DR.Agents: aws-platform-engineer, aws-cloud-security-engineer |
aws-messaging-and-streaming(Platform · 12 skills) | choose-messaging · eventbridge-routing · kinesis-stream-ops · msk-troubleshoot · queue-health | aws-mcp, sns-sqs, msk, mq, cloudwatch, awspricing | SQS, SNS, EventBridge (Event Buses, Pipes, Scheduler), Amazon MSK (Kafka), Kinesis Data Streams, Managed Apache Flink, Amazon MQ, and End-User Messaging (SES, SMS, Push). Agents: aws-serverless-engineer, aws-data-engineer |
aws-databases(Data & AI · 19 skills) | aurora-cluster-ops · blue-green-schema-migration · caching-strategy · choose-database · dynamodb-single-table-design · troubleshoot-db | aws-mcp, awsknowledge, dynamodb, postgres, mysql, elasticache, cloudwatch, awspricing + connectors | Aurora (PostgreSQL, MySQL, DSQL), RDS (all 6 engines), DynamoDB, DocumentDB, ElastiCache (Valkey/Redis/Memcached), Keyspaces, Neptune, Timestream, Performance Insights, DMS. Agents: aws-database-engineer, aws-sre-agent |
aws-analytics(Data & AI · 27 skills) | glue-data-quality · lake-formation-governance · lakehouse-design · opensearch-ops · redshift-optimize · spark-debug | aws-mcp, awsdataprocessing, redshift, s3tables, cloudwatch, spark-troubleshooting, awspricing | S3 Tables (Apache Iceberg), AWS Glue (Catalog, Spark ETL, Data Quality DQDL), Lake Formation, Athena, Redshift, OpenSearch, EMR, MWAA (Airflow), Kinesis/MSK ingestion. Agents: aws-data-engineer, aws-solutions-architect |
aws-ai-ml(Data & AI · 23 skills) | agentcore-deploy · bedrock-agent · genai-rag · migrate-llm-to-bedrock · sagemaker-endpoint-triage · sagemaker-job | aws-mcp, awsknowledge, sagemaker, agentcore, strands-agents, cloudwatch, awspricing, awsiac | Amazon Bedrock (Converse API, Knowledge Bases, Guardrails, LLM migration), Amazon Bedrock AgentCore & Strands Agents, and Amazon SageMaker AI (Training, Inference, MLOps). Agents: aws-agentcore-engineer, aws-sagemaker-engineer |
aws-observability(Operate · 10 skills) | create-canary · postmortem-coe · promql-slo-burnrate · query-logs · setup-apm · triage-incident | aws-mcp, cloudwatch, appsignals, cloudtrail, prometheus, awssupport, awsknowledge | CloudWatch (Metrics, Logs Insights, Alarms, SLOs, Synthetics Canaries), Application Signals APM, X-Ray, Managed Prometheus (PromQL burn rates) & Grafana, CloudTrail, COE postmortems. Agents: aws-sre-agent, aws-platform-engineer |
aws-resilience(Operate · 11 skills) | assess-resilience · chaos-experiment · dr-strategy-matrix · game-day-runbook · zonal-shift | aws-mcp, awsknowledge, cloudwatch, appsignals, cloudtrail, awssupport | AWS Resilience Hub assessments, AWS Fault Injection Service (FIS) chaos experiments with CloudWatch stop conditions, Route 53 ARC zonal shift/region switch, multi-region DR. Agents: aws-sre-agent, aws-solutions-architect |
aws-security-identity(Secure · 15 skills) | audit-iam · audit-kms-and-data-protection · rotate-secrets · security-posture · threat-model-stride · triage-guardduty-incident | aws-mcp, iam, wa-security, aws-security-agent, cloudtrail, awsiac, cloudwatch, tm | IAM least-privilege & Access Analyzer, Organizations SCPs/RCPs, KMS & Secrets Manager, Security Hub CSPM (OCSF), GuardDuty & CloudTrail triage, WAF/Network Firewall, STRIDE. Agents: aws-cloud-security-engineer, aws-devsecops-engineer |
aws-cost-optimization(Secure · 3 skills) | cost-anomaly · cur-athena-query · estimate-architecture · rightsize-commitment · waste-hunt-audit | aws-mcp, billing, awspricing, cloudwatch, awsiac | Cost Explorer & Anomaly Detection, CUR 2.0 Athena SQL analytics, Compute Optimizer P95/P99 right-sizing, Savings Plans & RI modeling, Shift-Left IaC cost estimation, waste hunt. Agents: aws-finops-engineer, aws-startup-advisor |
aws-well-architected(Secure · 6 skills) | architecture-diagram · generate-adr · landing-zone-design · review · threat-model | aws-mcp, awsknowledge, wa-security, awspricing, awsiac, tm, drawio | AWS Well-Architected Six-Pillar reviews, MADR 3.0 Architecture Decision Records (ADRs), Draw.io & Mermaid architecture diagrams, STRIDE threat modeling, Landing Zone design. Agents: aws-solutions-architect |
aws-migration(Modernize · 10 skills) | cloud-to-aws-migration · convert-schema · migration-plan · modernize-code · strangler-fig-cutover | aws-mcp, aws-transform-mcp, awsiac, postgres, awspricing, cloudwatch | 7 Rs migration strategy & Strangler Fig decomposition, AWS Transform (.NET, Java, mainframe, SQL), AWS MGN & App2Container, DMS schema conversion & CDC cutover. Agents: aws-modernization-agent, aws-database-engineer |
aws-marketplace-seller(Specialty · 4 skills) | create-private-offer-workflow · integrate-metering · publish-catalog-product · verify-seller-setup | aws-mcp, awsknowledge, awspricing, awsiac, cloudwatch | Metering & Entitlement APIs (ResolveCustomer, BatchMeterUsage, RegisterUsage), Catalog API product listings (StartChangeSet), Private Offers & CPPO, Agreement API.Agents: aws-solutions-architect |
aws-end-user-computing(Specialty · 4 skills) | optimize-euc-costs · provision-workspaces-fleet · setup-agent-access · troubleshoot-stream | aws-mcp, awsknowledge, cloudwatch, awspricing, awsiac | Amazon WorkSpaces Personal & Pools, Active Directory & IAM Identity Center integration, WSP streaming tuning, Amazon AppStream 2.0, WorkSpaces Secure Browser & Agent Access. Agents: aws-platform-engineer, aws-sre-agent |
aws-quantum-computing(Specialty · 3 skills) | debug-quantum-task · design-circuit · estimate-braket-cost · launch-hybrid-job | aws-mcp, awsknowledge, cloudwatch, awspricing | Amazon Braket OpenQASM 3.0 & SDK circuit design, Managed Simulators (SV1, DM1, TN1), QPU hardware targeting (IonQ, Rigetti, IQM, QuEra), Braket Hybrid Jobs (VQE, QAOA).Agents: aws-solutions-architect |
Each vertical plugin is self-contained and bundles its own aws-mcp definition. If you install multiple vertical plugins simultaneously, you can toggle duplicate aws-mcp instances off in /mcp so only a single proxy process runs.
Partner-built plugins
Partner-built plugins (plugins/partner-built/) wrap ecosystem and vendor tooling while preserving upstream conventions, attribution, and licensing across Claude Code, OpenAI Codex, and portable Agent Plugins 1.0.0 layouts:
| Plugin | Vendor / Maintainer | License | Skills | Binding Mode | What It Holds |
|---|---|---|---|---|---|
terraform | HashiCorp | MPL-2.0 | 16 | Main agent | All 16 official HashiCorp Terraform skills: HCL style guide, module refactoring, Terraform tests, search & bulk import, Terraform Stacks, Sentinel/OPA policy conversion, Azure Verified Modules (AVM), and Terraform Plugin Framework provider development (resources, actions, ephemeral resources, SDKv2 migration, acceptance tests, registry docs). |
crossplane-aws-engineer | TalkOps | MIT | 1 | Specialist sub-agent & Main agent | Crossplane AWS platform engineering skill and specialist agent: Upbound provider-family-aws, XRDs, namespaced Claims, Pipeline Compositions, IRSA/ProviderConfig authentication, tested teaching fixtures (vpc-network, s3-bucket, rds-postgres), and offline schema validation scripts (check-manifests.sh, render-test.sh, validate-schemas.sh). |
HashiCorp terraform plugin skills (16 skills)
talkops plugin install terraform
claude plugin install terraform@talkops-devops-plugins
| Category | Bundled Skills |
|---|---|
| HCL Authoring & Architecture | terraform-style-guide, refactor-module, terraform-stacks, terraform-search-import, azure-verified-modules |
| Testing & Policy | terraform-test, terraform-policy (.policy.hcl, .policytest.hcl, Sentinel → tfpolicy) |
| Provider Development (Plugin Framework) | new-terraform-provider, provider-resources, provider-actions, provider-ephemeral-resources, provider-configuration, provider-framework-migration (SDKv2 → Framework muxing), provider-test-patterns, run-acceptance-tests, provider-docs |
crossplane-aws-engineer plugin highlights
talkops plugin install crossplane-aws-engineer
claude plugin install crossplane-aws-engineer@talkops-devops-plugins
- Schema-first AWS authoring: Teaches a deterministic CRD schema-discovery workflow across the entire Upbound
provider-family-awssurface so agents never hallucinate CRD fields. - Reviewed reference fixtures: Includes ready-to-inspect compositions under
assets/forvpc-network/,s3-bucket/(encrypted, private, versioned),rds-postgres/(private subnet group, security group, deletion protection, filtered connection secrets), andauthentication/(IRSA +ProviderConfig). - Offline validation scripts: Bundles
check-manifests.sh,render-test.sh, andvalidate-schemas.shto validate Claims and Pipeline Compositions locally before applying to a Kubernetes cluster.