Docs/Agent Capabilities/AWS Management

AWS Management

Your agent as an infrastructure manager: natural language AWS operations.

Because SkyKoi agents run on EC2 instances with IAM role access and the AWS CLI v2 pre-installed, they can manage AWS infrastructure through natural language. The agent uses the exec tool to run AWS CLI commands.

What Your Agent Can Do

  • EC2 — Launch instances, check status, resize, terminate, manage security groups
  • S3 — Create buckets, upload/download files, configure lifecycle policies, manage permissions
  • Lambda — Create functions, deploy code, manage triggers, view logs
  • RDS — Create databases, manage backups, check performance, scale instances
  • CloudFormation — Deploy and manage infrastructure-as-code stacks
  • Route 53 — Manage DNS records and health checks
  • CloudWatch — Query metrics, set alarms, view logs, create dashboards
  • IAM — View policies and roles (write access is restricted by default)

Example Conversations

text
You: "Spin up a t3.medium EC2 instance in us-east-1 with Ubuntu 22.04"

Agent: I'll create that for you. Let me launch the instance...
[runs: aws ec2 run-instances --image-id ami-0c55b159... --instance-type t3.medium ...]

The instance is launching:
• Instance ID: i-0a1b2c3d4e5f
• Type: t3.medium
• Region: us-east-1
• AMI: Ubuntu 22.04 LTS
• Status: pending → running

Want me to configure a security group or set up SSH access?
text
You: "What's the status of our RDS databases?"

Agent: Let me check...
[runs: aws rds describe-db-instances ...]

You have 2 RDS instances:
• prod-db (db.r6g.xlarge) — Available, Multi-AZ, 89% storage used ⚠️
• staging-db (db.t3.medium) — Available, Single-AZ, 23% storage used

⚠️ prod-db is at 89% storage. Want me to increase the allocated storage?

⚠️AWS access is scoped by the IAM instance profile. The default profile (`skykoi-tenant-agent-profile`) provides Bedrock access. Additional AWS permissions can be configured for Enterprise customers.