Skip to main content
affpapa.org
RU EN
skill CX Codex

creating-api-gateway-stage — Claude Code skill for API Gateway

Builds an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling and WAF. Handy when a REST API ships to dev, test or production.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add aws/agent-toolkit-for-aws --skill creating-api-gateway-stage -a claude-code
Open on GitHub

What creating-api-gateway-stage does

This skill hands the agent a fixed procedure for standing up an API Gateway stage. You get CloudWatch logging, X-Ray tracing, throttling, a WAF web ACL association, method-level settings and authorization choices. The package holds SKILL.md plus a reference file, references/create-api-gateway-stage.md, that spells out the steps in order. The agent follows that instead of improvising a stage.

Logging has to be switched on in two places: the stage and the individual methods. When nothing shows up in CloudWatch, the usual suspects are the CloudWatch role's permissions, a missing log group, or one of those two levels left off. Stage creation itself fails on a wrong REST API ID or deployment ID, thin IAM permissions, or a stage name that breaks AWS naming conventions.

WAF is the other common snag. It can block traffic you actually want, so you review the WAF logs and either loosen the rules or add exceptions; count mode helps while you test. Everything runs against a live AWS account, so IAM permissions and your API identifiers need to be in place first.

What it helps with

  • create an API Gateway stage with logging and tracing
  • split dev, test and production across separate stages
  • attach a WAF web ACL to a REST API
  • set throttling per method
  • debug missing CloudWatch logs

Example prompts for the agent

  • Create a production API Gateway stage with CloudWatch logging and X-Ray tracing
  • Why are no CloudWatch logs showing up for my stage?
  • WAF is blocking legitimate requests to my API — what should I change?

How to install creating-api-gateway-stage

1Skills CLI (Vercel)

npx skills add aws/agent-toolkit-for-aws --skill creating-api-gateway-stage -a claude-code

2Manually: put the files in place

~/.claude/skills/creating-api-gateway-stage/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/creating-api-gateway-stage/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about creating-api-gateway-stage

How do I install creating-api-gateway-stage in Claude Code?

Run npx skills add aws/agent-toolkit-for-aws --skill creating-api-gateway-stage -a claude-code. The skill lands at ~/.claude/skills/creating-api-gateway-stage/SKILL.md.

What does creating-api-gateway-stage do?

It walks the agent through creating an API Gateway stage: CloudWatch logging, X-Ray tracing, throttling, WAF and IAM roles. It also covers troubleshooting — missing logs, failed stage creation, WAF blocking traffic.

What do I need before using it?

An AWS account with IAM permissions for API Gateway and CloudWatch, plus your REST API ID and deployment ID. Without them stage creation fails.

Source text

SKILL.md · Apache-2.0 
---
name: creating-api-gateway-stage
description: Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices. Use when deploying a REST API to different environments such as dev, test, or production.
version: 1
---

# Creating an API Gateway Stage

## Overview

Domain expertise for creating and configuring API Gateway stages with comprehensive
logging, monitoring, security, and throttling controls. Covers CloudWatch logging
setup, X-Ray tracing, WAF web ACL association, method-level configuration, and
authorization options.

## Create an API Gateway stage

To create a fully configured API Gateway stage with logging, throttling, WAF, and
authorization, follow the procedure exactly.
See [API Gateway stage creation procedure](references/create-api-gateway-stage.md).

## Troubleshooting

### CloudWatch logs not appearing

Verify the CloudWatch role permissions, log group existence, and that logging is
enabled at both stage and method levels. See the
[full procedure](references/create-api-gateway-stage.md) for details.

### Stage creation fails

Check REST API ID, deployment ID, IAM permissions, and stage naming conventions.

### WAF blocking legitimate requests

Review WAF logs, adjust rules or add exceptions, and consider count mode for testing.

© aws · Apache-2.0 · aws/agent-toolkit-for-aws

Similar skills

Everything for Cloud: AWS, Azure, GCP →
caveman-manage JuliusBrussee Checks Caveman Cloud experiment state and evidence, then recommends one action or blocks an unsafe request. Use it before starting, approving, cancelling, or rolling back an experiment. CX Codex +1 104,200installs workers-best-practices cloudflare Guides coding agents on production Cloudflare Workers standards, Wrangler typing, observability setup, and runtime anti-pattern checks. CX Codex +1 126,100installs cloudflare-email-service cloudflare A skill for Cloudflare Email Sending and Email Routing: it walks the agent through sending and receiving mail in Workers. CX Codex +1 102,300installs firebase-basics official google This skill sets up the Firebase CLI, handles sign-in, creates or switches projects, and downloads Android or iOS app configuration files. CX Codex 14,100installs cloudflare-one cloudflare Walks your agent through designing, configuring and troubleshooting Cloudflare One Zero Trust and SASE deployments. Useful when you need Access, Gateway or tunnel work done without digging through docs yourself. CX Codex +1 93,100installs cloudflare-one-migrations cloudflare Plans a migration from VPN, SWG or SASE to Cloudflare One: maps policies to Cloudflare resources, flags parity gaps and stages the rollout. CX Codex +1 89,500installs

From the same set133

debugging-lambda-timeouts Investigates AWS Lambda timeout failures by inspecting CloudWatch logs, metrics, and configurations. Use it when function runs hit or approach execution limits. CX Codex +1 6,400installs configuring-vpc-endpoints-for-private-aws-service-access A skill that walks the agent through VPC endpoint setup with AWS PrivateLink, so AWS services stay reachable without an internet gateway or public IPs. CX Codex +1 6,400installs setting-up-ec2-instance-profiles Configures EC2 instance profiles and IAM roles so applications call AWS services without hardcoded credentials. Useful when an instance needs temporary access to S3, DynamoDB, or SQS. CX Codex +1 6,200installs routing-traffic-with-route53-and-cloudfront Sets up Route 53 to send a custom domain to a CloudFront distribution with HTTPS and IPv6. Use it when creating alias records or connecting a domain to CloudFront. CX Codex +1 6,200installs creating-production-vpc-multi-az Plan a VPC across multiple Availability Zones, with public and private subnets, NAT gateways, routing, and security groups. Use it when setting up AWS network infrastructure. CX Codex +1 6,100installs creating-amazon-aurora-db-cluster-with-instances Creates Aurora cluster with instances, sets up password via Secrets Manager, and monitors status with retry logic. Supports MySQL and PostgreSQL. CX Codex +1 6,000installs setting-up-cloudtrail-multi-region Configures a multi-region AWS CloudTrail trail with S3 storage and CloudWatch Logs streaming. Useful for centralizing API audit logs and running security queries. CX Codex +1 6,100installs exporting-rds-to-s3 Walks the agent through exporting an RDS or Aurora snapshot to S3 as Parquet, from IAM roles and KMS encryption to task monitoring and data checks. CX Codex +1 6,100installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor