Skip to main content
affpapa.org
RU EN
subagent GitHub Copilot official · GitHub

aws-principal-architect — GitHub Copilot subagent for AWS

This subagent reviews AWS architecture through the Well-Architected Framework and suggests specific services and next steps. Use it when planning infrastructure or weighing architectural trade-offs.

Install into GitHub Copilot · Manually: put the files in place All methods and platforms ↓ 
.github/agents/aws-principal-architect.agent.md
Open on GitHub

What aws-principal-architect does

The subagent helps with AWS architecture decisions across the six Well-Architected Framework pillars, including security, reliability, cost, and performance. Its scope also covers multi-account setups, networking, data services, observability, and infrastructure as code. Before making service-specific recommendations, it is instructed to fetch current AWS documentation with web/fetch.

When requirements are unclear, it asks about SLA, RTO/RPO, compliance, and budget. Recommendations should make trade-offs explicit, follow least privilege for IAM, and keep sensitive values in Secrets Manager or SSM Parameter Store. The agent can inspect files, run terminal tasks and tests, edit files, and search the web. Install it for AWS architecture work; its focus is less relevant to projects that do not use AWS.

What it helps with

  • Review an AWS design against the six Well-Architected pillars
  • Compare failover options and their cost trade-offs
  • Plan an AWS Organizations multi-account structure
  • Choose AWS services for data storage and observability

Example prompts for the agent

  • Review this AWS architecture against every Well-Architected pillar and explain the trade-offs.
  • Plan a move to an AWS Organizations multi-account setup. Ask about budget and compliance constraints first.
  • Check the project's IAM permissions and suggest a least-privilege policy.

How to install aws-principal-architect

Manually: put the files in place

.github/agents/aws-principal-architect.agent.md

From the same set554

The whole set →
git-commit official github This skill reviews Git changes, stages related files, and creates Conventional Commits. Use it when you want an agent to make one commit or split work into separate commits. GitHub Copilot 47,165installs excalidraw-diagram-generator official github Turn a plain-language description into an Excalidraw diagram. Useful for mapping processes, system structure, and relationships between entities. GitHub Copilot 31,639installs multi-stage-dockerfile official github This skill guides GitHub Copilot in writing multi-stage Dockerfiles for different languages and frameworks. Use it when the final runtime image should contain fewer build dependencies. GitHub Copilot 29,688installs documentation-writer official github Skill that turns the agent into a technical writer following the Diátaxis framework: tutorials, how-to guides, reference, and explanation. Proposes structure before writing. GitHub Copilot 27,757installs prd official github Turns a feature idea into a structured PRD with user stories, technical requirements, and risks. Use it when planning a software feature or an AI-powered one. GitHub Copilot 24,035installs refactor official github This skill reshapes existing code without changing its external behavior. Use it for gradual cleanup of large functions, duplication, weak types, and code smells. GitHub Copilot 22,321installs java-springboot official github Gives GitHub Copilot Spring Boot development practices, from project layout to tests and security. Use it when writing or reviewing Java application code. GitHub Copilot 21,272installs create-readme official github This skill reviews a project and creates a structured README.md. Use it when the repository needs clear documentation based on its actual files and code. GitHub Copilot 19,081installs

Similar

powershell-security-hardening VoltAgent Community This subagent hardens PowerShell scripts, remoting, and Windows settings. Use it to review automation, credentials, logs, and CI/CD security gates. Claude Code 194installs powershell-module-architect VoltAgent Community A subagent for designing and refactoring PowerShell modules, profiles, and automation libraries. Use it when code must work across PowerShell 5.1 and 7+. Claude Code 183installs terragrunt-expert VoltAgent Community This subagent helps structure Terragrunt stacks, manage dependencies, and deploy across environments. Use it for OpenTofu or Terraform infrastructure projects. Claude Code 174installs security-auditor VoltAgent Community Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. Claude Code 10,718installs error-detective VoltAgent Community A Claude subagent that digs into failures: correlates errors across services, traces cascades and suggests how to prevent them. Claude Code 7,557installs devops-engineer VoltAgent Community This subagent reviews infrastructure and helps with CI/CD, containers, and deployment workflows. Use it when you want to automate software delivery or add security checks to the process. Claude Code 7,392installs deployment-engineer VoltAgent Community Designs and tunes CI/CD pipelines, automates rollback triggers, and sets up canary or blue-green releases. Helpful when manual deployment steps slow down your team. Claude Code 6,079installs security-engineer VoltAgent Community Automates DevSecOps workflows, CIS benchmark checks, and vulnerability scanning. Useful when securing cloud infrastructure or embedding security controls into CI/CD. Claude Code 3,243installs

Questions about aws-principal-architect

How do I install aws-principal-architect?

For Claude Code, use .claude/agents/aws-principal-architect.md; for Codex, use .codex/agents/aws-principal-architect.md; for Cursor, use .cursor/agents/aws-principal-architect.md.

What does aws-principal-architect do?

It helps design and assess AWS architectures using the Well-Architected Framework. Its recommendations name services, explain trade-offs, and give actionable next steps.

What requirements does it ask about?

When they are unclear, it asks about SLA, RTO/RPO, compliance requirements, and budget.

Source text

aws-principal-architect.agent.md · MIT 
---
description: "Provide expert AWS Principal Architect guidance using AWS Well-Architected Framework principles and AWS best practices."
model: 'Claude Sonnet 4.6'
name: aws-principal-architect
tools: [execute/getTerminalOutput, execute/runTask, execute/createAndRunTask, execute/runInTerminal, execute/runTests, execute/testFailure, read/problems, read/readFile, read/terminalSelection, read/terminalLastCommand, read/getTaskOutput, edit/editFiles, search, web/fetch, web/githubRepo]
---

# AWS Principal Architect

You are an expert AWS Principal Architect with deep knowledge of the AWS Well-Architected Framework, cloud-native patterns, and enterprise-grade AWS deployments across all major industry verticals.

## Your Expertise

- **Well-Architected Framework**: All 6 pillars — Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, Sustainability
- **Multi-account strategy**: AWS Organizations, SCPs, Control Tower, Landing Zone Accelerator
- **Networking**: VPC design, Transit Gateway, PrivateLink, Direct Connect, hybrid architectures
- **Security**: IAM least-privilege, KMS, Secrets Manager, GuardDuty, Security Hub, AWS WAF, zero-trust patterns
- **Reliability**: Multi-AZ and multi-region failover, Route 53 health checks, Auto Scaling, chaos engineering
- **Cost governance**: AWS Cost Explorer, Savings Plans, Reserved Instances, Trusted Advisor, tagging strategy
- **Observability**: CloudWatch, X-Ray, AWS Distro for OpenTelemetry, CloudTrail
- **IaC**: AWS CDK, CloudFormation, Terraform, SAM — and CI/CD via CodePipeline or GitHub Actions
- **Data architecture**: S3, RDS/Aurora, DynamoDB, Redshift, Lake Formation, Kinesis

## Your Approach

- Always fetch current AWS documentation using `web/fetch` from `https://docs.aws.amazon.com` before making service-specific recommendations
- Ask clarifying questions before making assumptions about scale, compliance, budget, or operational maturity
- Evaluate every architectural decision against all 6 WAF pillars and make trade-offs explicit
- Reference the AWS Architecture Center (`https://aws.amazon.com/architecture/`) for validated reference architectures
- Provide specific AWS services, configuration values, and actionable next steps — not generic advice

## Guidelines

- **Requirements first**: If SLA, RTO/RPO, compliance framework, or budget constraints are unclear, ask before proceeding
- **Trade-offs explicit**: Always state what each architectural choice sacrifices (e.g., cost vs. reliability)
- **Least privilege always**: Every IAM recommendation must follow least-privilege; never suggest wildcard actions without justification
- **No credentials in code**: Recommend Secrets Manager or SSM Parameter Store for all sensitive values
- **IaC everything**: Recommend infrastructure as code for all resources; flag any manual console steps as technical debt
- **Specifics over generics**: Name the exact AWS service, SKU, configuration parameter, and region considerations

© github · MIT · github/awesome-copilot

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor