aws-expert

AWS Expert

Expert knowledge base for AWS service behavior, defaults, and operational pitfalls. Contains 2,775 justified beliefs covering DynamoDB, CloudTrail, IAM, CloudFormation, RDS, S3, networking, compute, and cross-service interactions.

What is this?

This is an External Epistemic Memory (EEM) — a model-agnostic knowledge base that any LLM can use via the reasons CLI or tool calling. Unlike a LoRA or fine-tune, this knowledge is not baked into model weights. It is external, inspectable, correctable, and works with any model.

Stats

Top Topics

Domain Coverage

• DynamoDB: capacity billing, GSI behavior, autoscaling pitfalls, TTL audit gaps, global tables consistency modes, DAX caching, item size overhead, cross-region replication (692 beliefs)
• CloudTrail: audit blind spots, Lake configuration, KMS key irrevocability, event data stores, data event logging gaps, automated operation blind spots (354 beliefs)
• IAM: policy evaluation, cross-account access, permission boundaries, default security posture, resource policies (222 beliefs)
• CloudFormation: stack lifecycle, drift detection, resource dependencies, rollback behavior, nested stacks (128 beliefs)
• RDS/Aurora: backup strategies, PITR windows, parameter groups, Multi-AZ failover, read replicas, lifecycle state transitions (139 beliefs)
• S3: bucket policies, lifecycle rules, versioning, cross-region replication, access points (119 beliefs)
• EC2 & Compute: instance lifecycle, spot interruptions, AMI management, EBS volumes, ENI limits (113 beliefs)
• Networking: VPC design, security groups, NACLs, Route 53 health checks, CloudFront distributions, EIP management (129 beliefs)
• Backup & DR: AWS Backup, PITR, cross-region backup, lifecycle transitions that degrade DR posture (65 beliefs)
• DAX: caching behavior, consistency implications, cluster management (61 beliefs)
• CloudWatch: metrics, alarms, log groups, observability investment ceilings (54 beliefs)
• API Gateway: REST vs HTTP APIs, throttling, authorization, stage management (89 beliefs)
• SQS: visibility timeout, dead letter queues, FIFO ordering, message retention (43 beliefs)
• AppSync: GraphQL resolvers, caching, authorization modes (31 beliefs)
• Lambda: cold starts, concurrency, event source mappings, resource limits (25 beliefs)
• Container Services: ECS task definitions, EKS node groups, ECR lifecycle policies (52 beliefs)
• Security: default hardening, KMS key management, ACM certificates, FIS chaos engineering (53 beliefs)
• Additional topics: ElastiCache, SES, CDK, spot instances, NoSQL Workbench patterns (remaining beliefs)

How to Use

Import into a reasons database

reasons init
reasons import-json network.json

Query beliefs

reasons search "DynamoDB capacity billing"
reasons explain lifecycle-transitions-silently-degrade-dr-posture
reasons show cloudtrail-eds-kms-key-irrevocable

Use as an MCP tool or CLI

Any LLM agent that can call reasons search, reasons show, and reasons explain can use this knowledge base. The agent does not need to be told it is an expert — the knowledge base speaks for itself.

Key Beliefs

Sources

Built from exploration of AWS documentation, API behavior, and operational experience across DynamoDB, CloudTrail, IAM, CloudFormation, RDS, S3, EC2, VPC, and 25+ additional AWS services.

Files

Quality

• All 2,775 beliefs are IN (none retracted)
• 2,615 premises grounded in direct observations of AWS service behavior
• 160 derived beliefs justified from premises via SL justifications
• 0 nogoods — no contradictions detected
• Max derivation depth of 8, indicating multi-step reasoning chains
• Built and reviewed using ftl-reasons derive and review-beliefs pipeline

Limitations

• Focused on AWS service behavior and defaults as of mid-2026
• AWS services evolve rapidly; some beliefs may become stale as features change
• Heavier coverage of DynamoDB and CloudTrail than other services
• Does not cover pricing in detail beyond capacity billing mechanics
• No ATMS or assumption-based beliefs (single-context TMS only)

Authors

• Ben Thomasson (@benthomasson)

License

mit