Self-contained AWS specialist sub-agents. Each plugin bundles one named specialist agent (agents/<name>.md for Claude Code and codex/agents/<name>.toml for Codex) along with its domain skills, slash commands, deterministic safety hooks, and MCP servers.
claude plugin install aws-sre-agent@talkops-devops-plugins| Function | Agent plugin | Skills | Commands | MCP servers | What it does |
|---|---|---|---|---|---|
| Build & deliver | aws-iac-engineer |
12 | — | aws-mcp, awsiac, terraform, pulumi |
Multi-engine AWS IaC (CDK, CloudFormation, Terraform/OpenTofu, Pulumi, Crossplane), FinOps cost estimates, brownfield imports, and CI/CD & GitOps pipelines. |
aws-deployment-engineer |
9 | — | awsknowledge, awsiac, awspricing, awsapi, cloudwatch |
Codebase discovery → hosting architecture → pre-deploy cost estimate → IaC scaffolding → deployment verification & rollback. | |
aws-serverless-engineer |
24 | — | aws-serverless-mcp, aws-documentation-mcp, aws-dynamodb-mcp, aws-sns-sqs-mcp, aws-cloudwatch-mcp, aws-billing-cost-mcp + connectors |
Lambda (SnapStart, Power Tuning, Durable Functions, Managed Instances), API Gateway, Step Functions, EventBridge, SQS/SNS, DynamoDB, Aurora DSQL, and SAM/CDK. | |
aws-amplify-engineer |
9 | — | aws-mcp, awsknowledge, appsync, awsiac, dynamodb, cloudwatch |
Amplify Gen 2 TypeScript-first full-stack web & mobile apps: Cognito Auth, AppSync Data, S3 Storage, Functions, Custom CDK, and Hosting CI/CD. | |
aws-location-engineer |
6 | — | aws-mcp, awslocation |
Maps, geocoding, places search, route calculation/matrix, geofencing, and device tracking with Amazon Location Service V2. | |
| Platform & operations | aws-platform-engineer |
33 | — | aws-mcp, aws-iac, iam, cloudwatch, cloudtrail, pricing, billing-cost, well-architected-security, eks, ecs, serverless, awsnetwork, finch, sns-sqs, mq |
EC2, Golden AMIs, EKS (Auto Mode, Karpenter, Pod Identity), ECS Fargate, multi-AZ VPC/TGW/Cloud WAN networking, S3/EFS/FSx storage, and Golden Path landing zones. |
aws-sre-agent |
29 | — | aws-mcp, aws-api, cloudwatch, appsignals, prometheus, cloudtrail, eks, ecs, network, iac, cost-explorer, awssupport |
CloudWatch, Application Signals APM, X-Ray, CloudTrail forensics, Managed Prometheus/Grafana, EKS/ECS/VPC/DB reliability, FIS chaos, ARC zonal shift, and COE postmortems. | |
aws-devsecops-engineer |
18 | accounts cost harden iam investigate pentest posture release-readiness release-testing scan setup |
aws-mcp, aws-security-agent, aws-cloudwatch, aws-cloudtrail, aws-well-architected-security, aws-billing |
Live incident RCA, Security Hub CSPM triage, least-privilege IAM, IaC/perimeter hardening, AWS Security Agent SAST/DAST/pentest scans, release gates, and FinOps guardrails. | |
| Security & cost | aws-cloud-security-engineer |
9 | — | aws-mcp, iam, wa-security, cloudtrail, awsiac, cloudwatch, awsnetwork |
IAM & SCPs/RCPs, KMS & Secrets Manager data protection, Security Hub OCSF CSPM, GuardDuty & CloudTrail incident response, WAF/Network Firewall perimeter, and container security. |
aws-finops-engineer |
2 | — | aws-mcp, billing, awspricing, cloudwatch, awsiac |
Cost Explorer & Anomaly Detection, CUR 2.0 Athena SQL analytics, Compute Optimizer P95/P99 rightsizing, Savings Plans/RI modeling, Shift-Left IaC cost estimation, and waste elimination. | |
| Architecture & advisory | aws-solutions-architect |
24 | — | aws-mcp, awsknowledge, awspricing, iac, bcm, tm, drawio |
Well-Architected 6-pillar reviews, ADRs, STRIDE threat modeling, Draw.io architecture diagrams, multi-account Landing Zones, multi-region DR tiers, and Bedrock/ML architecture. |
aws-startup-advisor |
14 | usage-data |
aws-mcp, aws-pricing, aws-billing |
Stage-aware Pre-Seed to Series B architecture, account hygiene audits, Azure/GCP/Heroku → AWS migrations, OpenAI/Anthropic → Bedrock migrations, and AWS Activate optimization. | |
| Data & AI | aws-data-engineer |
25 | — | aws-mcp, dataprocessing, redshift, s3tables, cloudwatch, spark-troubleshooting |
S3 Tables (Apache Iceberg), AWS Glue (Catalog, Spark ETL, DQDL Data Quality), Lake Formation governance, Athena, Redshift, Kinesis/MSK streaming, MWAA, OpenSearch, and DataZone. |
aws-database-engineer |
18 | — | awsknowledge, aws-mcp, dynamodb, cloudwatch, postgres, mysql, elasticache, awspricing + connectors |
Workload-driven DB selection, Aurora (PostgreSQL/MySQL/DSQL), RDS, DynamoDB single-table design, ElastiCache (Valkey/Redis), DocumentDB, Keyspaces, Neptune, Performance Insights, and DMS. | |
aws-agentcore-engineer |
9 | — | aws-mcp, awsknowledge, agentcore, strands-agents, cloudwatch, appsignals, cloudtrail |
Build, connect, deploy, harden, debug, evaluate, and optimize production AI agents on Amazon Bedrock AgentCore (Runtime, Gateway, Memory, Identity, Observability) & Strands Agents. | |
aws-sagemaker-engineer |
30 | — | aws-mcp, sagemaker, awspricing, awsiac, cloudwatch |
End-to-end ML engineering on Amazon SageMaker AI: distributed training, HyperPod clusters, Bedrock/SageMaker fine-tuning, vLLM/LMI inference endpoints, MLOps Pipelines, and cost/endpoint triage. | |
| Migration & modernization | aws-modernization-agent |
13 | — | aws-transform-mcp, aws-mcp, awsiac, postgres |
7Rs portfolio assessment, Strangler Fig decomposition, AWS Transform (.NET, Java, mainframe COBOL, SQL Server), VMware MGN replatforming, DMS cutover, and parity verification. |
When you want a specific AWS domain capability attached directly to your main agent without spawning a sub-agent, see Vertical plugins.