Amazon Neptune

Safety guidance

This skill covers creating and modifying Neptune resources when the user requests it. The agent MUST confirm the action with the user before executing. Do NOT execute any create or modify operation without explicit user confirmation (e.g., "yes", "proceed", "confirmed", "go ahead"). If the user has not confirmed, present the planned action and ask for approval.

Execute these operations (after user confirmation)

Neptune Database:

• Create a cluster: create-db-cluster (requires a DB subnet group with subnets in ≥2 AZs — Neptune is deployed inside a VPC; optional public endpoints are supported with IAM auth — check the Neptune userguide "public endpoints" page for the minimum engine version). When enabling a public endpoint, ALSO scope the cluster's security-group inbound rule on port 8182 to known CIDR ranges or trusted source security groups — do NOT use 0.0.0.0/0.
• Create an instance (add writer or reader to a cluster): create-db-instance
• Change backup retention: modify-db-cluster --backup-retention-period
• Enable/disable deletion protection: modify-db-cluster --deletion-protection
• Change CloudWatch log exports: modify-db-cluster --enable-cloudwatch-logs-exports
• Tag resources: add-tags-to-resource, remove-tags-from-resource

Neptune Analytics: