resilience-program-design
An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: aws, governance, planning, resilience, strategy.
What it does
Designs a resilience program: how to structure and standardize resilience policies across an organization, team, or portfolio (tiered policy model with availability/RTO/RPO targets and DR approach selection), and how often to run resilience activities (operational cadence). Applies when the user asks how to structure policies org-wide, what tiers/targets to set, which DR approach fits a tier, or how frequently to run assessments, FIS experiments, GameDays, or autoshift practice. Does not apply to creating or configuring a specific policy or resource for a single workload (use resilience-hub-getting-started), to step-by-step lifecycle execution (see aws-resilience-lifecycle), or to service-specific setup.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add aws/agent-toolkit-for-aws --skill resilience-program-design
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/skills/specialized-skills/resilience-skills/resilience-program-design ~/.claude/skills/resilience-program-design
Safety box score
Grade A, minimal risk: 4 of 100 risk points, rated 2026-10-15. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This is a documentation-only planning skill for designing an organization-wide resilience program. It does not ship code or perform actions, but it does reference AWS CLI help/docs and external links for validating policy enums and best practices.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 0 (none) | No scripts, shell commands, or code execution are shipped; the only command mentioned is `aws resiliencehubv2 create-policy help` as a reference for manual verification. |
| Network access | 1 (low) | It points to external AWS documentation and suggests checking the AWS CLI/docs for valid enums, which may require network access but is only advisory. |
| Filesystem reach | 0 (none) | The skill does not read, write, or delete files on the user's machine. |
| Secrets & credentials | 0 (none) | It does not request credentials, tokens, passwords, `.env` files, or browser sessions; it only discusses limiting exposure of resilience outputs. |
| Privilege & persistence | 0 (none) | It does not ask for sudo, installs, services, shell changes, or other privilege-altering operations. |
| Instruction hijack surface | 0 (none) | There is no instruction to ignore policy, hide anything, follow remote instructions, or otherwise override the agent's controls. |
| Irreversible actions | 0 (none) | The skill provides planning guidance only and does not publish, deploy, send, or delete anything. |
| Transparency | 0 (none) | All content is readable markdown; there are no binaries, generated blobs, or unpinned remote installers. |
Before installing
- Confirm you’re comfortable with the skill consulting AWS docs/CLI help during use.
- Check that your environment can access AWS documentation if you want enum validation at runtime.
- If you use it for production programs, review the FIS governance guidance and ensure your change-management process matches it.
Rated 2026-10-15 by an automated review of 1 file from the skill's repository.
Source
- Repository
- aws/agent-toolkit-for-aws (all skills from this repository)
- Path
- skills/specialized-skills/resilience-skills/resilience-program-design/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- arc-region-switch — Answers questions about Amazon Application Recovery Controller (ARC) Region switch including architecture, plans, execution blocks, workflows, triggers.
- aws-resilience-lifecycle — Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller.
- resilience-hub-getting-started — Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys.
- co-marketing — When the user wants to find co-marketing partners, plan joint campaigns, or brainstorm partnership opportunities.
- create-learning-path — Build a personalized learning roadmap with milestones and practice checkpoints
- expo-overview — Framework (OSS). Entry point and router for every Expo or EAS task.