Monitor AWS activity and security events using CloudTrail
One-click CloudTrail monitoring, but AWS Security Hub and GuardDuty already cover this.
Various Claude Skills created along the way
One-command AWS CRUD endpoints inside Claude Code when you're already there.
Developers using Claude Code who need quick AWS backends
AWS SAM · Serverless Framework · CDK
From the description: Create a token-secured REST API endpoint backed by AWS Lambda and DynamoDB with full CRUD and paginated list support. Deploys via CloudFormation. Use when user wants to quickly spin up an API endpoint, create a simple REST API on AWS, build a quick data store with an API, set up a Lambda+DynamoDB endpoint, or needs a fast way to log and retrieve structured data. Triggers on "create an endpoint", "quick API", "Lambda endpoint", "DynamoDB API", "CRUD endpoint", "log data to AWS".
Example use: Thariq's recent post on how the team uses Claude Skills has a section on logging skill use with a PreToolUse hook (https://x.com/trq212/status/2033949937936085378). His example code shows logging to a local file but for company-wide tracking, you'd want to log to a central place. I used my skill to stand up an endpoint for this and my ~/.claude/hooks/log-skill.sh POSTS to it:
skill=$(echo "$prompt" | awk '{print $1}' | sed 's|^/||') args=$(echo "$prompt" | sed 's|^/[^ ]||' | sed 's|^ ||')
# Build the JSON body body=$(jq -nc \ --arg skill_name "$skill" \ --arg invoked_by "$USER" \ --arg args "$args" \ --arg session_id "$session_id" \ '{skill_name: $skill_name, invoked_by: $invoked_by, args: $args, session_id: $session_id}')
# POST to the endpoint (fire-and-forget so we don't block the prompt) curl -sf -X POST "$ENDPOINT" \ -H "Content-Type: application/json" \ -H "x-api-token: ${SKILL_LOG_TOKEN}" \ -d "$body" \ >/dev/null 2>&1 &
One-click CloudTrail monitoring, but AWS Security Hub and GuardDuty already cover this.
Rust CLI handles Nitro attestation docs so you don't have to parse them manually.
4x token savings on screenshots with readable text at 800px grey.
Real-time cost tracking for Claude Code sessions; saves money intuition before you ship.
Claude Code toolkit with session tracking and token budgeting—tight integration, narrow reach.
LLM-on-LLM scanning catches obfuscation and semantic attacks before skills execute.