New to Claude Skills? Learn how to install them →

aws on GitHub

Production VPC Creator

OfficialFree

Set up a multi-AZ VPC with ease and best practices.

by aws2.3k stars on aws/agent-toolkit-for-aws
2 views
Updated Aug 10, 2026
Get this skill

Free · Opens the source repo

What Production VPC Creator does

The Production VPC Creator skill provides a comprehensive guide for setting up a production-ready Virtual Private Cloud (VPC) on AWS, ensuring that it adheres to best practices outlined in the AWS Well-Architected Framework. This skill is particularly useful for developers and system architects who need to create a robust VPC infrastructure that spans multiple Availability Zones (AZs). By following the detailed instructions provided, users can efficiently configure public and private subnets, internet gateways, NAT gateways, route tables, and security groups, all while benefiting from automatic CIDR planning and DNS resolution.

The skill simplifies the complexities involved in VPC creation by offering a structured procedure that covers essential parameters such as VPC name, region, allowed web CIDRs, and more. Users can specify the number of AZs, which can range from two to six, and make decisions regarding SSH access for enhanced security. The skill also includes troubleshooting tips for common issues, such as insufficient AZs or NAT gateway delays, ensuring that users can address potential problems effectively.

This skill is ideal for teams deploying applications in a cloud environment where high availability and security are paramount. By leveraging this skill, users can reduce the time and effort required to set up a compliant and scalable VPC, allowing them to focus on application development rather than infrastructure management. Whether you are launching a new service or migrating existing applications, the Production VPC Creator skill equips you with the knowledge and procedures necessary to establish a solid networking foundation on AWS.

When to use it

Use this skill when you need to deploy a new application in a multi-AZ environment on AWS, ensuring high availability and security.

When not to use it

This skill may not be suitable for simple VPC setups or for users who require a highly customized network configuration that deviates from standard best practices.

What you can build with it

Launching a New Application

When deploying a new application that requires high availability, use this skill to set up a compliant VPC with multi-AZ support.

Migrating Existing Services

If you are migrating existing services to AWS, this skill helps create a secure and scalable VPC infrastructure.

Developing Cloud-Native Solutions

For teams building cloud-native applications, this skill provides a foundation for establishing a robust networking environment.

How to install Production VPC Creator

View source

1. Install with the skills CLI

npx skills add aws/agent-toolkit-for-aws/creating-production-vpc-multi-az --agent claude-code

2. Or install it manually

Download the skill folder and drop it into ~/.claude/skills/ for all projects, or .claude/skills/ to scope it to one repo. Restart Claude Code so it picks up the new skill.

Anthropic's agentic coding CLI, and the reference implementation of Agent Skills. Drop a skill folder into ~/.claude/skills and Claude Code loads it automatically whenever a task matches the skill's description. Claude Code docs

Inside SKILL.md

Written by aws

Creating a Production-Ready VPC Across Multiple Availability Zones

Overview

Domain expertise for creating production-ready VPC infrastructure distributed across multiple Availability Zones. Covers VPC creation with DNS support, public and private subnet layout with automatic CIDR calculation, internet gateway, NAT gateways for high-availability outbound access, route table configuration, and tiered security groups following AWS Well-Architected principles.

Create a production VPC

To create a fully configured multi-AZ VPC with public/private subnets, NAT gateways, route tables, and security groups, follow the procedure exactly. See Production VPC creation procedure.

Key parameters:

  • vpc_name (required): Name prefix for all resources
  • region (required): Target AWS region
  • allowed_web_cidrs (required): CIDR blocks allowed for web access — allow 0.0.0.0/0 only if explicitly requested
  • vpc_cidr (optional, default 10.0.0.0/16): VPC CIDR block
  • availability_zones (optional, default 3): Number of AZs (2–6)
  • environment (required): Environment tag
  • enable_ssh_access (optional, default false): Whether to create SSH security group

Troubleshooting

Insufficient Availability Zones

The target region must have at least 2 available AZs. Use aws ec2 describe-availability-zones to verify.

NAT Gateway creation delays

NAT Gateways can take several minutes to become available. The procedure waits for availability before configuring route tables.

Security group CIDR warnings

The procedure warns about 0.0.0.0/0 for web access CIDRs and recommends specific IP ranges for production workloads, but allows it if explicitly requested.

Frequently asked questions about Production VPC Creator

Similar skills