Update to AWS Core

{
  "name": "aws-observability",
  "description": "Builds, configures, debugs, and optimizes AWS observability with CloudWatch (Log Insights, Metrics, Alarms, Dashboards, EMF), X-Ray, CloudTrail, and ADOT (AWS Distro for OpenTelemetry), AND enables/onboards services to Application Signals using ADOT auto-instrumentation SDKs. Covers Log Insights queries, alarms (metric, composite, anomaly), dashboards, custom metrics/EMF, X-Ray tracing and sampling, ADOT collector config, CloudTrail auditing, and end-to-end Application Signals enablement via ADOT SDKs (CloudWatch Observability EKS add-on, CloudWatch Agent IAM, OTLP endpoints, ServiceEvents, Dynamic Instrumentation) on EC2, ECS, EKS, and Lambda in Python, Node.js, Java, and .NET. Applies to CloudWatch, alarms, dashboards, EMF, X-Ray, traces, CloudTrail, ADOT, monitoring, synthetics/canaries, OR enabling/onboarding/instrumenting a service for Application Signals using ADOT, ServiceEvents, auto-instrumentation, or making a service show up in Application Signals. Not for app logging or security threat detection.",
  "included_files": [
    {
      "relative_path": "assets/alarm-template.ts",
      "size_in_bytes": 4002
    },
    {
      "relative_path": "assets/otel-config.yaml",
      "size_in_bytes": 1458
    },
    {
      "relative_path": "references/alarms.md",
      "size_in_bytes": 11234
    },
    {
      "relative_path": "references/application-signals-cicd-metadata.md",
      "size_in_bytes": 6660
    },
    {
      "relative_path": "references/application-signals-onboarding.md",
      "size_in_bytes": 19997
    },
    {
      "relative_path": "references/appsignals-guides/ec2-dotnet.md",
      "size_in_bytes": 16511
    },
    {
      "relative_path": "references/appsignals-guides/ec2-java.md",
      "size_in_bytes": 10502
    },
    {
      "relative_path": "references/appsignals-guides/ec2-nodejs.md",
      "size_in_bytes": 19220
    },
    {
      "relative_path": "references/appsignals-guides/ec2-python.md",
      "size_in_bytes": 24938
    },
    {
      "relative_path": "references/appsignals-guides/ecs-dotnet.md",
      "size_in_bytes": 8477
    },
    {
      "relative_path": "references/appsignals-guides/ecs-java.md",
      "size_in_bytes": 5707
    },
    {
      "relative_path": "references/appsignals-guides/ecs-nodejs.md",
      "size_in_bytes": 6670
    },
    {
      "relative_path": "references/appsignals-guides/ecs-python.md",
      "size_in_bytes": 8119
    },
    {
      "relative_path": "references/appsignals-guides/eks-dotnet.md",
      "size_in_bytes": 3972
    },
    {
      "relative_path": "references/appsignals-guides/eks-java.md",
      "size_in_bytes": 3997
    },
    {
      "relative_path": "references/appsignals-guides/eks-nodejs.md",
      "size_in_bytes": 4158
    },
    {
      "relative_path": "references/appsignals-guides/eks-python.md",
      "size_in_bytes": 5297
    },
    {
      "relative_path": "references/appsignals-guides/lambda-dotnet.md",
      "size_in_bytes": 4004
    },
    {
      "relative_path": "references/appsignals-guides/lambda-java.md",
      "size_in_bytes": 4464
    },
    {
      "relative_path": "references/appsignals-guides/lambda-nodejs.md",
      "size_in_bytes": 5277
    },
    {
      "relative_path": "references/appsignals-guides/lambda-python.md",
      "size_in_bytes": 5819
    },
    {
      "relative_path": "references/cloudtrail.md",
      "size_in_bytes": 4011
    },
    {
      "relative_path": "references/dashboards.md",
      "size_in_bytes": 5951
    },
    {
      "relative_path": "references/log-insights.md",
      "size_in_bytes": 7141
    },
    {
      "relative_path": "references/metrics.md",
      "size_in_bytes": 7630
    },
    {
      "relative_path": "references/synthetics.md",
      "size_in_bytes": 6647
    },
    {
      "relative_path": "references/tracing.md",
      "size_in_bytes": 9198
    },
    {
      "relative_path": "references/troubleshooting.md",
      "size_in_bytes": 6951
    }
  ],
  "skill_md_contents": "---\nname: aws-observability\ndescription: >-\n  Builds, configures, debugs, and optimizes AWS observability with CloudWatch (Log Insights,\n  Metrics, Alarms, Dashboards, EMF), X-Ray, CloudTrail, and ADOT (AWS Distro for OpenTelemetry),\n  AND enables/onboards services to Application Signals using ADOT auto-instrumentation SDKs.\n  Covers Log Insights queries, alarms (metric, composite, anomaly), dashboards, custom\n  metrics/EMF, X-Ray tracing and sampling, ADOT collector config, CloudTrail auditing, and\n  end-to-end Application Signals enablement via ADOT SDKs (CloudWatch Observability EKS add-on,\n  CloudWatch Agent IAM, OTLP endpoints, ServiceEvents, Dynamic Instrumentation)\n  on EC2, ECS, EKS, and Lambda in Python, Node.js, Java, and .NET.\n  Applies to CloudWatch, alarms, dashboards, EMF, X-Ray, traces, CloudTrail, ADOT,\n  monitoring, synthetics/canaries, OR enabling/onboarding/instrumenting\n  a service for Application Signals using ADOT, ServiceEvents, auto-instrumentation,\n  or making a service show up in Application Signals.\n  Not for app logging or security threat detection.\nversion: 2\nmetadata:\n  service: [cloudwatch, xray, cloudtrail, synthetics]\n  task: [build, deploy, debug, optimize, configure, enable, onboard, instrument]\n  persona: [developer, devops]\n  workload: [observability]\n---\n\n# AWS Observability\n\n## Overview\n\nDomain expertise for AWS observability across metrics, logs, and traces, covering the full lifecycle: **enabling/onboarding** Application Signals on a service using ADOT (AWS Distro for OpenTelemetry) auto-instrumentation SDKs through **operating** it (CloudWatch alarms, dashboards, Log Insights, custom metrics, EMF, X-Ray trace analysis, CloudTrail auditing, ADOT collector config).\n\n**Works best with** the [AWS MCP server](https://docs.aws.amazon.com/aws-mcp/) — enables running CLI commands, querying CloudWatch, and validating configurations directly. All guidance also works with standard AWS CLI access.\n\n**Note:** Reference files contain specific runtime versions, quota values, and feature matrices that may change. When precision matters (e.g., deploying to production, choosing a runtime, or checking a quota), confirm values against current AWS documentation rather than relying solely on the values in these files.\n\n## Routing\n\n| User need | Action |\n|-----------|--------|\n| Enabling/onboarding a service to Application Signals (auto-instrumentation) | Read [application-signals-onboarding.md](references/application-signals-onboarding.md) |\n| Propagating ServiceEvents git/deployment metadata through CI/CD | Read [application-signals-cicd-metadata.md](references/application-signals-cicd-metadata.md) |\n| Per-platform/per-language enablement steps | Read the matching `references/appsignals-guides/<platform>-<language>.md` (e.g. [eks-python.md](references/appsignals-guides/eks-python.md)) |\n| Writing Log Insights queries | Read [log-insights.md](references/log-insights.md) |\n| Configuring alarms (metric, composite, anomaly) | Read [alarms.md](references/alarms.md) |\n| Publishing custom metrics or using EMF | Read [metrics.md](references/metrics.md) |\n| Setting up X-Ray tracing or ADOT | Read [tracing.md](references/tracing.md) |\n| Building dashboards | Read [dashboards.md](references/dashboards.md) |\n| Debugging observability issues | Read [troubleshooting.md](references/troubleshooting.md) — starts with the 5 most common fixes |\n| Debugging canary failures | Read [synthetics.md](references/synthetics.md) — see Common failures table |\n| CloudTrail operational auditing | Read [cloudtrail.md](references/cloudtrail.md) |\n| Setting up Lambda monitoring with CDK | Use [alarm-template.ts](assets/alarm-template.ts) as a starting point |\n| Creating synthetic canaries | Read [synthetics.md](references/synthetics.md) |\n| Configuring ADOT collector | Use [otel-config.yaml](assets/otel-config.yaml) as a starting point |\n| Spans multiple areas | Read the most specific reference first, then consult others as needed |\n\n## Files\n\n| File | Content |\n|------|---------|\n| [application-signals-onboarding.md](references/application-signals-onboarding.md) | Enable Application Signals auto-instrumentation: EKS add-on, CloudWatch Agent IAM, OTLP endpoints, ServiceEvents env vars, Dynamic Instrumentation — two-tier scope by platform/language |\n| [application-signals-cicd-metadata.md](references/application-signals-cicd-metadata.md) | ServiceEvents git & deployment metadata propagation through CI/CD (the 5 `OTEL_AWS_SERVICE_EVENTS_*` vars) |\n| `references/appsignals-guides/` (e.g. [eks-python.md](references/appsignals-guides/eks-python.md)) | 16 per-platform × per-language enablement guides (EC2/ECS/EKS/Lambda × Python/Node.js/Java/.NET) |\n| [alarms.md](references/alarms.md) | Metric, composite, anomaly detection alarms — configuration, constraints, recommended defaults |\n| [log-insights.md](references/log-insights.md) | Complete query syntax, commands, functions, known issues, reusable query library |\n| [metrics.md](references/metrics.md) | Custom metrics, EMF spec, metric filters, high-resolution, retention |\n| [tracing.md](references/tracing.md) | X-Ray → ADOT migration, sampling rules, annotations vs metadata, collector config |\n| [dashboards.md](references/dashboards.md) | Widget types, cross-account/region, dynamic labels, sharing |\n| [troubleshooting.md](references/troubleshooting.md) | Error → cause → fix for all observability services |\n| [cloudtrail.md](references/cloudtrail.md) | Operational auditing, event types, S3+Athena queries |\n| [synthetics.md](references/synthetics.md) | Canary runtime/blueprint constraints, VPC networking, common failures |\n| [alarm-template.ts](assets/alarm-template.ts) | Best-practice CDK Lambda monitoring (alarms + dashboard) |\n| [otel-config.yaml](assets/otel-config.yaml) | ADOT collector config for X-Ray traces + CloudWatch EMF metrics |\n"
}