From Harness DevOps
AWS conventions — 15-minute STS session ceiling, AFT-on-Control-Tower account bootstrap, EKS Pod Identity over IRSA, OIDC trust federated to STS with tight sub-claim scope, and env/blast-radius account tagging. Use when targeting AWS for IaC, CI/CD trust policies, or EKS.
How this skill is triggered — by the user, by Claude, or both
Slash command
/harness-devops:addon-awsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
- STS session duration: 900 s (15 min) maximum. Refuse credentials older.
token.actions.githubusercontent.com:sub (or equivalent) for tight scope.env:dev|staging|prod and blast-radius:low|med|high|nuclear;
PreToolUse hooks read these tags to choose deny rules.aws-eks-version-EOL; 1.32 reached EOL Feb 28 2026.Provides behavioral guidelines to reduce common LLM coding mistakes, focusing on simplicity, surgical changes, assumption surfacing, and verifiable success criteria.
Searches, retrieves, and installs Agent Skills from prompts.chat registry using MCP tools like search_skills and get_skill. Activates for finding skills, browsing catalogs, or extending Claude.
npx claudepluginhub camilool8/harness-engineering-templates --plugin harness-devops