cloud-skills

Plugin cloud-skills from marketplace ops-engineering-skills in selvarajmurugesan90/ops-engineering-skills. Commands read from the repo's manifest — 1 month ago.

Skills (14)

• aws-landing-zone-setup

  Guides designing and implementing a multi-account AWS landing zone using AWS Organizations, Control Tower, and Account Factory — including the account/OU hierarchy, Service Control Policies, centralized logging, and baseline guardrails. Use when a user asks to "set up a new AWS account structure", "

• azure-landing-zone-setup

  Guides designing and implementing an Azure landing zone using Management Groups, subscription democratization, Azure Policy, and the Cloud Adoption Framework (CAF) Landing Zone Accelerator pattern. Use when a user asks to "design an Azure landing zone", "set up Management Groups and subscriptions",

• cloud-access-request-and-iam-lifecycle-management

  Handles the everyday operational request to grant, time-box, and later revoke a scoped IAM permission for a contractor, new hire, or a temporary need (e.g. "give the new contractor read-only S3 access for 30 days," "grant break-fix access to prod for this incident," "revoke Priya's access, she left

• cloud-cost-anomaly-investigation

  Walks through investigating an unexpected cost spike on this month's cloud bill right now — querying AWS Cost Explorer/CUR, Azure Cost Management, or GCP BigQuery billing export to isolate the specific resource, tag, and team responsible before it becomes a formal FinOps review. Use when a user asks

• cloud-cost-finops-optimization

  Guides establishing cloud cost visibility and reducing spend across AWS, Azure, and GCP through tagging/labeling discipline, rightsizing, commitment-based discounts (Reserved Instances, Savings Plans, Committed Use Discounts), and FinOps showback/chargeback practices. Use when a user asks to "reduce

• cloud-iam-hardening

  Guides hardening identity and access management across AWS, Azure, and GCP — least-privilege policy design, eliminating long-lived credentials in favor of federation (OIDC/Workload Identity), break-glass access, and periodic access review. Use when a user asks to "reduce IAM permissions", "remove un

• cloud-native-storage-strategy

  Guides choosing and configuring cloud storage services — object storage (S3, Azure Blob, GCS), block storage, file storage, and lifecycle/ tiering policies — with encryption, access control, and cost-tiering best practices across AWS, Azure, and GCP. Use when a user asks to "design a storage archite

• cloud-resource-post-provisioning-validation-and-drift-detection

  Verifies what actually got provisioned in AWS/Azure/GCP matches declared intent, via terraform plan drift checks, AWS Config conformance packs, and Azure Policy compliance scans, plus tag/policy compliance checks against a resource baseline. Use when a user asks to "check for drift," "verify this de

• disaster-recovery-and-backup-strategy

  Guides designing backup and disaster-recovery strategy for cloud workloads — RTO/RPO-driven DR pattern selection (backup-restore, pilot light, warm standby, multi-site active-active), cross-region/cross- account backup replication, and DR runbook testing across AWS, Azure, and GCP. Use when a user a

• gcp-landing-zone-setup

  Guides designing and implementing a GCP landing zone using the Resource Manager folder hierarchy, Organization Policy constraints, VPC Service Controls, and project vending aligned to Google's enterprise foundation blueprint. Use when a user asks to "design a GCP folder structure", "set up a GCP lan

• multi-cloud-networking-patterns

  Guides designing hub-and-spoke or transit network topologies, IP address management, and secure interconnects (VPN, direct/express connections, private endpoints, and cross-cloud peering) across AWS, Azure, and GCP. Use when a user asks to "design a hub-and-spoke network", "connect two VPCs/VNets",

• oci-landing-zone-setup

  Guides designing and implementing an Oracle Cloud Infrastructure (OCI) landing zone using the Compartment hierarchy, Identity Domains and IAM policies, Cloud Guard/Security Zones, and the CIS OCI Landing Zone reference architecture — including tenancy/region structure and hybrid connectivity via Fas

• on-prem-infrastructure-patterns

  Guides designing and operating on-premises, private-cloud, and hybrid infrastructure — VMware vSphere as the virtualization baseline, automated bare-metal provisioning (PXE/MAAS/Redfish), inventory-as-code (IPAM/DCIM), and hybrid connectivity back to public cloud (VPN, dedicated interconnect equival

• orphaned-cloud-resource-cleanup

  Finds and safely removes orphaned cloud resources that accumulate silent cost — unattached EBS volumes/managed disks, unassociated Elastic IPs/Azure Public IPs, orphaned load balancers/target groups, and stale manual snapshots — with an explicit non-use confirmation procedure before any deletion. Us

Similar plugins