aws-serverless
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Reference Documentation and Best Practices: The skill consists of architectural references, configuration guidelines, and troubleshooting procedures for AWS Lambda, API Gateway, and Step Functions. The provided material promotes secure implementation patterns, such as applying least-privilege IAM execution roles, configuring customer-managed KMS keys for sensitive data encryption, and avoiding wildcard CORS configurations in production.
- Operational Guidelines: The documentation includes recommendations for right-sizing memory, setting explicit timeouts, establishing proper dead-letter queues (DLQs), and configuring monitoring/alarms to preserve application stability and avoid resource exhaustion.
- Standard Code Templates: The included Python template (
assets/powertools-handler.py) implements standard operational best practices via the AWS Lambda Powertools library, incorporating structured JSON logging, performance tracing, and idempotency controls to handle duplicate events safely.
Audit Metadata