
Production VPC Creator
OfficialFreeSet up a multi-AZ VPC with ease and best practices.
Free · Opens the source repo
What Production VPC Creator does
The Production VPC Creator skill provides a comprehensive guide for setting up a production-ready Virtual Private Cloud (VPC) on AWS, ensuring that it adheres to best practices outlined in the AWS Well-Architected Framework. This skill is particularly useful for developers and system architects who need to create a robust VPC infrastructure that spans multiple Availability Zones (AZs). By following the detailed instructions provided, users can efficiently configure public and private subnets, internet gateways, NAT gateways, route tables, and security groups, all while benefiting from automatic CIDR planning and DNS resolution.
The skill simplifies the complexities involved in VPC creation by offering a structured procedure that covers essential parameters such as VPC name, region, allowed web CIDRs, and more. Users can specify the number of AZs, which can range from two to six, and make decisions regarding SSH access for enhanced security. The skill also includes troubleshooting tips for common issues, such as insufficient AZs or NAT gateway delays, ensuring that users can address potential problems effectively.
This skill is ideal for teams deploying applications in a cloud environment where high availability and security are paramount. By leveraging this skill, users can reduce the time and effort required to set up a compliant and scalable VPC, allowing them to focus on application development rather than infrastructure management. Whether you are launching a new service or migrating existing applications, the Production VPC Creator skill equips you with the knowledge and procedures necessary to establish a solid networking foundation on AWS.
When to use it
Use this skill when you need to deploy a new application in a multi-AZ environment on AWS, ensuring high availability and security.
When not to use it
This skill may not be suitable for simple VPC setups or for users who require a highly customized network configuration that deviates from standard best practices.
What you can build with it
Launching a New Application
When deploying a new application that requires high availability, use this skill to set up a compliant VPC with multi-AZ support.
Migrating Existing Services
If you are migrating existing services to AWS, this skill helps create a secure and scalable VPC infrastructure.
Developing Cloud-Native Solutions
For teams building cloud-native applications, this skill provides a foundation for establishing a robust networking environment.
How to install Production VPC Creator
View source1. Install with the skills CLI
npx skills add aws/agent-toolkit-for-aws/creating-production-vpc-multi-az --agent claude-code2. Or install it manually
Download the skill folder and drop it into ~/.claude/skills/ for all projects, or .claude/skills/ to scope it to one repo. Restart Claude Code so it picks up the new skill.
Anthropic's agentic coding CLI, and the reference implementation of Agent Skills. Drop a skill folder into ~/.claude/skills and Claude Code loads it automatically whenever a task matches the skill's description. Claude Code docs
Inside SKILL.md
Written by awsCreating a Production-Ready VPC Across Multiple Availability Zones
Overview
Domain expertise for creating production-ready VPC infrastructure distributed across multiple Availability Zones. Covers VPC creation with DNS support, public and private subnet layout with automatic CIDR calculation, internet gateway, NAT gateways for high-availability outbound access, route table configuration, and tiered security groups following AWS Well-Architected principles.
Create a production VPC
To create a fully configured multi-AZ VPC with public/private subnets, NAT gateways, route tables, and security groups, follow the procedure exactly. See Production VPC creation procedure.
Key parameters:
vpc_name(required): Name prefix for all resourcesregion(required): Target AWS regionallowed_web_cidrs(required): CIDR blocks allowed for web access — allow 0.0.0.0/0 only if explicitly requestedvpc_cidr(optional, default10.0.0.0/16): VPC CIDR blockavailability_zones(optional, default 3): Number of AZs (2–6)environment(required): Environment tagenable_ssh_access(optional, default false): Whether to create SSH security group
Troubleshooting
Insufficient Availability Zones
The target region must have at least 2 available AZs. Use aws ec2 describe-availability-zones to verify.
NAT Gateway creation delays
NAT Gateways can take several minutes to become available. The procedure waits for availability before configuring route tables.
Security group CIDR warnings
The procedure warns about 0.0.0.0/0 for web access CIDRs and recommends specific IP ranges for production workloads, but allows it if explicitly requested.
Frequently asked questions about Production VPC Creator
Similar skills
Turborepo
Optimized build system for JavaScript/TypeScript monorepos.
Azure Pipelines Validation
Streamline your Azure DevOps pipeline changes locally.
Azure Developer CLI
Streamline your Azure project workflows with best practices.
Azure Container Registry CLI
Manage Azure Container Registry resources with ease.
Aspire
Build and orchestrate polyglot distributed applications seamlessly.
Vercel CLI
Manage and deploy Vercel projects from the command line.
