troubleshooting-application-failures — Claude Code skill
A skill that traces application failures through CloudWatch logs: it locates log groups, pulls error patterns and stack traces, then ranks fixes by priority.
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a claude-codeWhat troubleshooting-application-failures does
The skill hands your agent a fixed procedure for diagnosing a broken application. It discovers the relevant log groups, searches them for error patterns and stack traces, works out the root cause, and returns remediation steps ordered by priority. The steps live in references/application-failure-troubleshooting.md, and the agent follows them in order.
Logs are the starting point, not the whole picture. When they point at a timeout, a throttle, a retry or a permissions problem, the skill reads the configuration behind it — an API Gateway integration timeout, a queue visibility timeout, a function timeout and its event source mapping. Describe and Get calls like these usually fit inside read-only access.
Your AWS credentials need logs:DescribeLogGroups, logs:DescribeLogStreams, logs:StartQuery and logs:GetQueryResults. Miss any of them and the queries come back as access denied, so check that first. If no log group turns up, the skill asks for exact names; typical ones are /aws/lambda/function-name, /aws/apigateway/api-name or your own application groups. Queries against very large groups can time out — narrow the window or cap the results and run several smaller queries instead.
What it helps with
- locate the CloudWatch log group of a failing application
- pull stack traces and recurring errors out of raw log output
- separate the root cause from follow-on errors
- connect a timeout or throttle to the setting that causes it
- get a prioritized list of fixes to apply
Example prompts for the agent
- The app is failing in production — check the CloudWatch logs and tell me why
- Dig through the log group
/aws/lambda/function-nameand suggest what to fix first - We keep hitting API Gateway timeouts; inspect the logs and the integration config
How to install troubleshooting-application-failures
1Skills CLI (Vercel)
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a claude-code2Manually: put the files in place
~/.claude/skills/troubleshooting-application-failures/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/troubleshooting-application-failures/
1Skills CLI (Vercel)
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a codex2Manually: put the files in place
.agents/skills/troubleshooting-application-failures/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a cursor2Manually: put the files in place
.cursor/skills/troubleshooting-application-failures/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install aws/agent-toolkit-for-aws troubleshooting-application-failures2Manually: put the files in place
.github/skills/troubleshooting-application-failures/SKILL.md1Skills CLI (Vercel)
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a gemini-cli2Platform CLI
gemini skills install https://github.com/aws/agent-toolkit-for-aws --path skills/specialized-skills/operations-skills/troubleshooting-application-failuresManually: put the files in place
.devin/skills/troubleshooting-application-failures/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about troubleshooting-application-failures
How do I install troubleshooting-application-failures in Claude Code?
Run npx skills add aws/agent-toolkit-for-aws --skill troubleshooting-application-failures -a claude-code. The skill lands at ~/.claude/skills/troubleshooting-application-failures/SKILL.md.
What does troubleshooting-application-failures do?
It diagnoses application failures from CloudWatch logs: finds the log groups, searches for errors and stack traces, identifies the root cause and returns remediation recommendations.
Which AWS permissions does the skill need?
logs:DescribeLogGroups, logs:DescribeLogStreams, logs:StartQuery and logs:GetQueryResults. Without them log queries fail with access denied.
Source text
SKILL.md · Apache-2.0
--- name: troubleshooting-application-failures description: Troubleshoots failing applications by discovering and analyzing CloudWatch log groups to identify error patterns, root causes, and actionable solutions. Use when an application is experiencing failures and log-based diagnosis is needed. version: 2 --- # Application Failure Troubleshooting ## Overview Domain expertise for diagnosing application failures through CloudWatch log analysis. Discovers relevant log groups, searches for error patterns and stack traces, performs root cause analysis, and generates prioritized remediation recommendations. Logs are where the investigation starts, not its boundary. When the logs point at a timeout, throttle, retry or permission problem, read the configuration that sets it, for example the API Gateway integration timeout, the queue's visibility timeout, or the function timeout and event source mapping. Read-only access normally includes these Describe and Get calls. ## Troubleshoot a failing application To diagnose and resolve application failures using CloudWatch logs, follow the procedure exactly. See [Application failure troubleshooting procedure](references/application-failure-troubleshooting.md). ## Troubleshooting ### No log groups found Ask the user for specific log group names. Common patterns: `/aws/lambda/function-name`, `/aws/apigateway/api-name`, or custom application log groups. ### Access denied errors Verify AWS credentials have `logs:DescribeLogGroups`, `logs:DescribeLogStreams`, `logs:StartQuery`, and `logs:GetQueryResults` permissions. ### Query timeouts Reduce the time window or limit results. Large log groups may require multiple smaller queries.
© aws · Apache-2.0 · aws/agent-toolkit-for-aws