AWS CLI guard hooks and read-only skills for Claude Code
Blocks AWS CLI write/mutation operations so all infrastructure changes go through IaC. Only read-only commands (get-, list-, describe-, etc.) are permitted.