How does this skill prevent cross-environment accidents?

It performs a mandatory identity check and matches the active AWS Account ID against a predefined environment mapping (Dev/Staging/Prod) before any command is executed.

Can it detect the environment automatically?

Yes, it can infer the target environment by analyzing directory structures, Terraform backend configurations, and current workspaces.

Does it support AWS SSO (Single Sign-On)?

Yes, it includes specific procedures for checking SSO session status and logging into named profiles using the AWS SSO CLI.

When should I use this skill?

It should be invoked as a precursor to any Terraform operations, AWS CLI commands, or drift detection tasks to ensure security and accuracy.

AWS Profile Management

Name: AWS Profile Management
Author: lgbarn

bylgbarn

Cloud Infrastructure

Verifies and manages AWS credentials to ensure infrastructure operations occur in the correct environment and prevent cross-account accidents.

About

The AWS Profile Management skill provides a safety-first framework for Claude to interact with AWS, implementing a robust verification layer before executing any Terraform or AWS CLI commands. It automatically checks the current caller identity, matches account IDs against specific environments (Dev, Staging, Prod), and handles complex credential scenarios like AWS SSO and role assumption. By enforcing strict environment detection and pre-operation checklists, it eliminates the risk of deploying resources to the wrong account or using expired tokens, making it an essential tool for secure and reliable DevOps workflows.

Key Features

Multi-environment mapping for dev, staging, and production accounts
Environment detection via directory structure and Terraform backend state
Automated AWS identity verification via STS get-caller-identity
Credential expiry detection for assumed roles and SSO sessions
Support for profile switching and role assumption workflows
0 GitHub stars

Use Cases

Validating production credentials before running sensitive terraform apply operations
Switching between multiple AWS profiles when managing hybrid cloud environments
Ensuring active SSO sessions have not expired during long-running infrastructure tasks

About

Key Features

Multi-environment mapping for dev, staging, and production accounts
Environment detection via directory structure and Terraform backend state
Automated AWS identity verification via STS get-caller-identity
Credential expiry detection for assumed roles and SSO sessions
Support for profile switching and role assumption workflows
0 GitHub stars

Use Cases

Validating production credentials before running sensitive terraform apply operations
Switching between multiple AWS profiles when managing hybrid cloud environments
Ensuring active SSO sessions have not expired during long-running infrastructure tasks