Individual skill
aws-observability
Investigates root causes on the Omni context graph (service dependencies) and Intelligence insights; builds, configures, debugs, tunes AWS observability - operator-symptom questions, detecting Omni vs classic CloudWatch. CloudWatch on a reporting service: fleet health views, Log Insights, metric/composite/anomaly alarms, custom metrics/EMF, dashboards, X-Ray/ADOT tracing, canaries, CloudTrail, Dynamic Instrumentation (live breakpoints), and Application Signals service map. CloudWatch Omni on an existing Space: SQL over logs/traces, PromQL, Omni dashboards, alerts and Slack notifications, programmatic/IaC access (API/SDK/CLI/CFN), driving Omni from a coding agent or skills, AI agent quality from traces - on-demand and online evaluation of live traffic, incl. setting it up, readback, evaluators. For first-time setup - creating an Omni Space, granting access, ingestion, or ADOT instrumentation for Application Signals or Omni - use setting-up-cloudwatch-observability. Not for app logging or threat detection.
plugins/aws-core/skills/aws-observability/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,431
- Repository last updated
- Nov 7, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
- data Derived category
- security Derived category
- data-databases Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 38,018 bytesSKILL.mdcore · 38,018 bytesSKILL.mdcore · 38,018 bytesSKILL.mdcore · 38,018 bytesassets/cloudwatch/alarm-template.tsruns · 4,002 bytesassets/cloudwatch/otel-config.yamlasset · 1,930 bytesreferences/cloudwatch-omni/agent-evaluation.mddoc · 117,634 bytesreferences/cloudwatch-omni/alerts.mddoc · 111,111 bytesreferences/cloudwatch-omni/concepts.mddoc · 30,014 bytesreferences/cloudwatch-omni/context-graph.mddoc · 33,372 bytesreferences/cloudwatch-omni/dashboards.mddoc · 81,255 bytesreferences/cloudwatch-omni/intelligence.mddoc · 17,329 bytesreferences/cloudwatch-omni/programmatic-access.mddoc · 15,821 bytesreferences/cloudwatch-omni/query/promql-metrics.mddoc · 68,423 bytesreferences/cloudwatch-omni/query/sql-logs-traces.mddoc · 46,190 bytesreferences/cloudwatch-omni/query/trace-exploration.mddoc · 26,765 bytesreferences/cloudwatch-omni/query/views.mddoc · 13,060 bytesreferences/cloudwatch-omni/service-health.mddoc · 17,941 bytesreferences/cloudwatch/alarms.mddoc · 11,828 bytesreferences/cloudwatch/cloudtrail.mddoc · 5,479 bytesreferences/cloudwatch/dashboards.mddoc · 5,953 bytesreferences/cloudwatch/dynamic-instrumentation.mddoc · 40,290 bytesreferences/cloudwatch/dynamic-instrumentation/breakpoint-creation.mddoc · 16,676 bytesreferences/cloudwatch/dynamic-instrumentation/call-tree-and-directions.mddoc · 5,836 bytesreferences/cloudwatch/dynamic-instrumentation/snapshot-parsing.mddoc · 4,318 bytesreferences/cloudwatch/investigation.mddoc · 8,144 bytesreferences/cloudwatch/log-insights.mddoc · 8,521 bytesreferences/cloudwatch/metrics.mddoc · 7,630 bytesreferences/cloudwatch/synthetics.mddoc · 6,619 bytesreferences/cloudwatch/tracing.mddoc · 9,611 bytesreferences/cloudwatch/troubleshooting.mddoc · 7,728 bytesscripts/cloudwatch-omni/capture_dataset_from_traces.pyruns · 25,801 bytesscripts/cloudwatch-omni/evaluate_traces.pyruns · 43,708 bytesscripts/cloudwatch-omni/test_evaluate_traces.pyruns · 12,893 bytesscripts/cloudwatch/di_app_signals_client.pyruns · 3,422 bytesscripts/cloudwatch/di_capture.pyruns · 8,723 bytesscripts/cloudwatch/di_constants.pyruns · 560 bytesscripts/cloudwatch/di_crud_rendering.pyruns · 13,420 bytesscripts/cloudwatch/di_crud_tools.pyruns · 29,486 bytesscripts/cloudwatch/di_error_translation.pyruns · 5,742 bytesscripts/cloudwatch/di_formatting.pyruns · 992 bytesscripts/cloudwatch/di_gateway.pyruns · 7,161 bytesscripts/cloudwatch/di_instrumentation.pyruns · 13,280 bytesscripts/cloudwatch/di_location.pyruns · 15,668 bytesscripts/cloudwatch/di_logs_client.pyruns · 4,327 bytesscripts/cloudwatch/di_region.pyruns · 2,032 bytesscripts/cloudwatch/di_result.pyruns · 1,998 bytesscripts/cloudwatch/di_session.pyruns · 2,032 bytesscripts/cloudwatch/di_snapshot_parsing.pyruns · 11,678 bytesscripts/cloudwatch/di_snapshot_queries.pyruns · 2,458 bytesscripts/cloudwatch/di_snapshot_rendering.pyruns · 12,762 bytesscripts/cloudwatch/di_snapshot_tools.pyruns · 12,320 bytesscripts/cloudwatch/di_snapshots.pyruns · 13,150 bytesscripts/cloudwatch/di_status_assessment.pyruns · 4,813 bytesscripts/cloudwatch/di_status_rendering.pyruns · 12,061 bytesscripts/cloudwatch/di_status_tools.pyruns · 13,295 bytesscripts/cloudwatch/di_validation.pyruns · 11,486 bytes
Read excerpt
# AWS Observability
## Overview
Domain expertise for AWS observability across metrics, logs, and traces, for **two
products** that share the CloudWatch name but are separate services with separate
control planes, data models, and APIs:
| | CloudWatch | CloudWatch Omni |
|---|---|---|
| **What it is** | Log groups, metric namespaces, alarms, Log Insights, X-Ray, Application Signals | Application Observability / Agent Observability. A **Space** per account per Region is the access boundary over the account's CloudWatch **Dataset** (OpenTelemetry logs, traces, and metrics); the Dataset is a CloudWatch resource the Space reads, not something the Space contains |
| **Control plane** | `aws cloudwatch`, `aws logs`, `aws xray`, `aws application-signals` | `aws cloudwatchomni` (endpoint prefix `cloudwatch-omni`, signing name `cloudwatch`) |
| **Query** | Log Insights query language; GetMetricData | SQL over `logs.default` / `traces.default`; PromQL over metrics; named views |
| **Notify** | Alarms (metric, composite, anomaly) | **Alerts** (SQL/PromQL rule, contributors, OK/WARNING/CRITICAL/NODATA) |