devopsby automateyournetwork
AWS Cloud Monitoring
automateyournetwork/aws-cloud-monitoring
AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.
What it changes
Passed 17 of 22 test cases with the skill, and 14 of 22 without it.
Without skill64%
With skill77%
Checks it passed that the model alone missed
- Specify uvx awslabs.cloudwatch-mcp-server@latest as the execution command.
- Name BytesProcessed as the metric for traffic volume through a NAT Gateway.
- State that listing CloudWatch alarms in ALARM state is the required first step.
and 2 more in the full report
4 fixed13 passed either way4 still failing1 broke
- Pass-rate lift
- +14 pp
- Tokens
- +26%
- Agent turns
- 0%
- Response time
- -34%
Model gemini-3.6-flashMeasured 8/16/2026v117 of 22 cases passed with skill
See it in action
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptWe want to launch the official AWS CloudWatch MCP server over stdio transport using uvx. What exact command string should be executed?
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| Specify uvx awslabs.cloudwatch-mcp-server@latest as the execution command. | Missed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md82 linessingle file
AWS Cloud Monitoring
MCP Server
- Command:
uvx awslabs.cloudwatch-mcp-server@latest (stdio transport)
- Requires:
AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION (or AWS_PROFILE)
Key Capabilities
- Metrics: Query CloudWatch metrics for any AWS service (EC2, ELB, TGW, NAT GW, VPN)
- Alarms: List and inspect CloudWatch alarms and their states
- Logs: Run CloudWatch Logs Insights queries across any log group
- Flow Logs: Analyze VPC and TGW flow logs for traffic patterns and dropped connections
Workflow: Network Monitoring Dashboard
When a user asks "how is our AWS network performing?":
- Check alarms: List CloudWatch alarms in ALARM state
- VPN metrics: Tunnel state, bytes in/out for site-to-site VPNs
- NAT Gateway metrics: Active connections, packets dropped, bytes processed
- Transit Gateway metrics: Bytes in/out, packets dropped per attachment
- ELB metrics: Healthy/unhealthy targets, latency, 5xx errors
- Report: Network health dashboard with any issues flagged
Workflow: Flow Log Analysis
When investigating traffic patterns or security events:
- Query VPC flow logs: Filter by source IP, destination IP, port, action (ACCEPT/REJECT)
- Identify rejected traffic: Find REJECT entries to see blocked connections
- Top talkers: Aggregate by source/destination to find heaviest traffic flows
- Time correlation: Narrow to specific time windows around incidents
- Report: Traffic analysis with recommendations
Common CloudWatch Network Metrics
Track record
Benchmark
17 / 22
test cases passed, vs 14 / 22 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
Importedautomateyournetwork / netclaw
workspace/skills/aws-cloud-monitoring/SKILL.md
License Apache-2.0Imported 8/3/2026Version v1