Community생산성 & 협업github.com

aws/troubleshooting-s3-files

Amazon S3 Files 문제를 진단하고 해결합니다. 마운트 실패, 권한 오류, 동기화 문제, 성능 저하 등을 포함합니다. 사용자가 S3 파일 시스템을 마운트할 수 없거나, 접근 거부 오류가 발생하거나, 변경 사항이 S3에 동기화되지 않거나, lost+found에 파일이 표시되거나, 예상보다 느리게 작동할 때 사용하세요.

troubleshooting-s3-files란 무엇인가요?

이 스킬은 Amazon S3 Files의 일반적인 문제를 진단하고 해결하는 데 특화되어 있습니다. 주로 S3 파일 시스템 마운트 실패, 권한 오류, 동기화 문제, 성능 저하 등의 시나리오에서 유용합니다. 개발자나 시스템 관리자가 S3 기반 파일 시스템에서 발생하는 다양한 문제를 효율적으로 파악하고 해결할 수 있도록 설계되었습니다. 이 스킬은 AWS 환경에서 S3를 사용하는 모든 사용자에게 도움이 되며, 문제 해결 과정에서 CLI 명령어, 로그 분석, 구성 확인 등의 방법을 활용합니다.

지원 대상~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/troubleshooting-s3-files

Installed? Explore more 생산성 & 협업 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →

즐겨 사용하는 AI에게 물어보기

이 에이전트 스킬이 미리 로드된 새 채팅을 엽니다.

문서

troubleshooting-s3-files은(는) 무엇을 하나요?

Amazon S3 Files 문제를 진단하고 해결합니다. 마운트 실패, 권한 오류, 동기화 문제, 성능 저하 등을 포함합니다. 사용자가 S3 파일 시스템을 마운트할 수 없거나, 접근 거부 오류가 발생하거나, 변경 사항이 S3에 동기화되지 않거나, lost+found에 파일이 표시되거나, 예상보다 느리게 작동할 때 사용하세요.

문제 진단

  1. 마운트 실패: S3 파일 시스템을 마운트하려고 할 때 오류가 발생하면 다음을 확인하세요.

    • IAM 역할 또는 사용자에 s3:ListBucket 및 s3:GetObject 권한이 있는지 확인합니다.
    • 마운트 명령의 버킷 이름과 경로가 올바른지 확인합니다.
    • 네트워크 연결 및 DNS 해석이 작동하는지 확인합니다.
  2. 권한 오류 (Access Denied): 접근 거부 오류가 발생하면:

    • IAM 정책을 검토하여 필요한 S3 작업에 대한 권한이 있는지 확인합니다.
    • 버킷 정책이 요청을 허용하거나 거부하는지 확인합니다.
    • 객체 수준 권한이 올바르게 설정되었는지 확인합니다.
  3. 동기화 문제: S3로 변경 사항이 동기화되지 않는 경우:

    • aws s3 sync 명령의 --delete 플래그 사용 여부를 확인합니다.
    • 로컬 파일과 S3 객체의 최종 수정 시간을 비교합니다.
    • S3 버킷에서 버전 관리가 활성화되어 있는지 확인합니다.
  4. lost+found 디렉토리: 파일이 lost+found에 나타나는 경우:

    • 이는 일반적으로 파일 시스템 불일치 또는 강제 종료 후 발생합니다.
    • fsck 명령을 사용하여 파일 시스템을 복구하세요.
  5. 성능 문제: 예상보다 느린 경우:

    • 네트워크 대역폭 및 지연 시간을 확인합니다.
    • S3 요청 레이트 제한을 초과하지 않았는지 확인합니다.
    • 대용량 파일의 경우 멀티파트 업로드를 사용하는 것이 좋습니다.

해결 방법

마운트 실패 해결

  1. AWS CLI를 사용하여 S3 버킷에 접근할 수 있는지 테스트합니다:
    aws s3 ls s3://your-bucket-name/
    
  2. 필요한 권한이 있는지 IAM 정책을 확인합니다:
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:ListBucket",
            "s3:GetObject"
          ],
          "Resource": [
            "arn:aws:s3:::your-bucket-name",
            "arn:aws:s3:::your-bucket-name/*"
          ]
        }
      ]
    }
    
  3. 마운트 명령을 다시 시도합니다:
    sudo mount -t s3fs your-bucket-name /path/to/mountpoint -o passwd_file=/path/to/passwd-file
    

권한 오류 해결

  1. 버킷 정책을 확인하여 요청을 허용하는지 확인합니다.
  2. IAM 사용자/역할에 s3:PutObject 및 s3:DeleteObject 권한을 추가합니다.
  3. 객체 수준 ACL이 올바르게 설정되었는지 확인합니다.

동기화 문제 해결

  1. 증분 동기화를 위해 aws s3 sync 명령을 사용합니다:
    aws s3 sync /local/dir s3://your-bucket-name/ --delete
    
  2. S3 버킷에서 버전 관리를 활성화하여 변경 사항을 추적합니다.
  3. --exclude 및 --include 패턴을 사용하여 동기화 범위를 제어합니다.

lost+found 복구

  1. fsck 명령을 사용하여 파일 시스템을 복구합니다:
    sudo fsck /path/to/mountpoint
    
  2. lost+found에서 파일을 복사하고 적절한 위치로 이동합니다.
  3. 정기적인 백업을 설정하여 데이터 손실을 방지합니다.

성능 최적화

  1. 멀티파트 업로드 임계값을 조정합니다 (기본값 8MB):
    • 환경 변수 S3FS_MULTIPART_UPLOAD_THRESHOLD를 설정합니다.
  2. 캐싱을 활성화하여 읽기 성능을 향상시킵니다:
    • -o use_cache=/path/to/cache 옵션을 사용합니다.
  3. 네트워크 연결이 안정적인지 확인하고 필요한 경우 AWS Direct Connect를 고려합니다.

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

aws/amazon-bedrock

Builds generative AI applications on Amazon Bedrock. Covers model invocation (Converse API, InvokeModel), RAG with Knowledge Bases, Bedrock Agents, Guardrails, and AgentCore. Use when invoking models, setting up Knowledge Bases, creating agents, applying guardrails, deploying to AgentCore, troubleshooting Bedrock errors (ThrottlingException, AccessDeniedException), or choosing models (Claude, Llama, Nova, Titan). ALSO USE for prompt caching setup and debugging, quota health checks and throttling diagnosis, cost attribution and tracking, migrating between Claude model generations (4.5 to 4.6 to 4.7), chunking strategies, API selection (Converse vs InvokeModel), guardrail capabilities, and model selection. Also covers AgentCore Payments setup (x402, microtransactions, Payment Manager, Connector, Instrument, Coinbase CDP, Stripe Privy, 402 Payment Required, pay for content, paid endpoint, agent payments). NOT for custom model training, Rekognition, or Comprehend.

aws/aws-amplify

Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync/DynamoDB), storage (S3), functions, APIs, and AI (Amplify AI Kit with Bedrock). Supports React, Next.js, Vue, Angular, React Native, Flutter, Swift, and Android. Always use this skill for Amplify Gen2 topics — even for questions you think you know — it contains validated, version-specific patterns that prevent common mistakes. TRIGGER when: user mentions Amplify Gen2; project has amplify/ directory or amplify_outputs; code imports @aws-amplify packages; user asks about defineBackend, defineAuth, defineData, defineStorage, defineFunction, or npx ampx. SKIP: Amplify Gen1 (amplify CLI v6), standalone SAM/CDK without Amplify (use aws-serverless), direct Bedrock without Amplify AI Kit (use bedrock).

aws/aws-billing-and-cost-management

Analyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute Optimizer, look up service pricing, query CUR with Athena, detect cost anomalies, scope costs to billing views, and monitor Free Tier usage. Triggers on: AWS bill, cost analysis, reduce spend, savings plan, reserved instance, right-size, budget alert, cost optimization, pricing, free tier, cost anomaly, CUR, cost audit, billing view, billing view ARN.

aws/aws-cdk

Authors, deploys, and troubleshoots AWS infrastructure using CDK with TypeScript or Python. Covers best practices, stack architecture, and construct patterns. Always use when writing CDK constructs, bootstrapping environments, running cdk deploy/synth/diff, fixing CDK or CloudFormation errors, planning stack structure, importing existing resources, resolving drift, or refactoring stacks without resource replacement.

aws/aws-cloudformation

Author, validate, and troubleshoot AWS CloudFormation templates. Covers template authoring with secure defaults, pre-deployment validation (cfn-lint, cfn-guard, change sets), and root-cause diagnosis of failed stacks using CloudFormation events and CloudTrail correlation.

aws/aws-containers

Deploys and operates containerized workloads on ECS, Fargate, and ECR. Covers task definitions, Fargate services, ECR repository setup and lifecycle policies, ECS Exec debugging, service scaling, deployment strategies, load balancer integration, and logging configuration. Use when deploying, debugging, or optimizing containers on AWS. ALSO USE for container deployment options (ECS vs ECS Express Mode), networking modes, health check troubleshooting, OOM errors, secrets injection, blue/green deployments, ECR image management, and App Runner sunset guidance and migration. NOT for Kubernetes, EKS, or CI/CD pipelines.

aws/aws-iam

Verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits, Organizations quirks, and SAML/MFA specifics. Use alongside documentation when working with IAM roles, policies, STS, or Organizations. Do NOT use for non-IAM authorization like Cognito user-pool policies or app-level RBAC.

aws/aws-messaging-and-streaming

Guides use of AWS messaging and streaming services. Covers Amazon SQS, Amazon SNS, Amazon EventBridge, Amazon MQ, Amazon Kinesis Data Streams, Amazon Data Firehose, Amazon Managed Service for Apache Flink, and Amazon Managed Streaming for Apache Kafka (MSK). Use when implementing messaging and streaming patterns.

aws/aws-observability

Builds, configures, debugs, and optimizes AWS observability using CloudWatch (Logs Insights, Metrics, Alarms, Dashboards, EMF), X-Ray, CloudTrail, and ADOT. Covers Log Insights query syntax (fields, filter, stats, parse, pattern, join, subqueries), alarm configuration (metric, composite, anomaly detection, missing data treatment), dashboard design, custom metrics (PutMetricData, EMF, metric filters), X-Ray tracing (ADOT, sampling rules, annotations vs metadata), ADOT collector config, and CloudTrail auditing. Use when the user mentions CloudWatch, Log Insights, alarms, INSUFFICIENT_DATA, dashboards, custom metrics, EMF, X-Ray, traces, sampling, CloudTrail, who deleted, ADOT, OpenTelemetry, observability, monitoring, synthetics, canaries, or troubleshooting alarm behavior. Do NOT use for application logging setup, container log drivers, or security threat detection.

aws/aws-sdk-js-v3-usage

AWS SDK for JavaScript v3 development patterns. Use when writing JavaScript or TypeScript code that uses AWS services via @aws-sdk/* packages (aws-sdk-js-v3), or when asked about schemas, runtime validation, serialization, or code generation in the context of the JS/TS AWS SDK.

aws/aws-sdk-python-usage

AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore. This includes creating service clients or resources, configuring sessions and credentials, handling errors with ClientError, using paginators and waiters, S3 file transfers and presigned URLs, DynamoDB table operations, and any boto3/botocore client configuration. Use this skill whenever Python code imports boto3 or botocore, or when the user asks about AWS operations in Python.

aws/aws-sdk-swift-usage

AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package.

aws/aws-serverless

Builds, deploys, manages, debugs, configures, and optimizes serverless applications on AWS using Lambda, API Gateway, Step Functions, EventBridge, and SAM/CDK. Covers cold starts, CORS debugging, event source mappings, troubleshooting, concurrency, SnapStart, Powertools, function URLs, EventBridge Scheduler, Lambda layers, and production readiness. Triggers on mentions of Lambda, API Gateway, Step Functions, SAM templates, CDK serverless stacks, DynamoDB stream triggers, SQS event sources, cold starts, timeouts, 502/504 errors, throttling, concurrency, CORS, Powertools, or any event-driven architecture on AWS, even without the word "serverless." Does not apply to EC2, ECS/Fargate containers, or Amplify hosting.

aws/aws-transform

Performs code upgrades, migrations, and transformations using the AWS Transform (ATX) CLI. Use when upgrading language versions, migrating AWS SDKs, migrating frameworks (Angular, Vue.js, Spring Boot, React), upgrading libraries, optimizing performance, migrating x86 to Graviton, analyzing codebases / generating documentation, or defining custom transformations with natural language. Runs locally on a few repositories or at scale across hundreds via AWS Batch/Fargate.

aws/configuring-vpc-endpoints-for-private-aws-service-access

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.

aws/connecting-lambda-to-api-gateway

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration, permissions, and deployment. Always use this skill when connecting Lambda to API Gateway — it handles CORS, throttling, access logging, and production security hardening that are easy to miss.

aws/connecting-lambda-to-dynamodb

Connects an AWS Lambda function to DynamoDB with IAM roles, stream event source mapping, and read/write permissions. Use when setting up Lambda-DynamoDB integration, processing DynamoDB stream events, or deploying serverless event-driven architectures.

aws/connecting-to-data-source

Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL, MySQL, RDS), Redshift, Snowflake, and BigQuery. Gathers connection hints from user, discovers existing connections and RDS/Redshift candidates, registers credentials in Secrets Manager or IAM DB auth, configures VPC, and tests. Triggers on: connect to database, set up Glue connection, register data source, connect to Snowflake/BigQuery/RDS, connection timeout, test connection, troubleshoot connection. Do NOT use for moving data (use ingesting-into-data-lake), creating tables (use creating-data-lake-table), queries (use querying-data-lake), catalog exploration (use exploring-data-catalog), or SaaS (Salesforce, ServiceNow, SAP, MongoDB, Kafka).

aws/connecting-vpcs-with-peering

Establishes VPC peering connections between two VPCs for direct private network connectivity. Always use this skill when creating or managing VPC peering — it validates CIDR overlap, updates all route tables in both VPCs, configures DNS resolution, and provides security group guidance that are critical for correct connectivity.

aws/creating-amazon-aurora-db-cluster-with-instances

Creates a complete Amazon Aurora database cluster with instances, handling cluster creation, instance provisioning, and Secrets Manager password management in the proper sequence. Use when setting up new Aurora MySQL or PostgreSQL clusters with production-ready configuration.

관련 스킬