timestream-influxdb — Skillopedia

Amazon Timestream for InfluxDB Overview Amazon Timestream for InfluxDB is a managed time-series database with engine variants and deployment types whose capabilities differ. Before comparing them, retrieve the Timestream for InfluxDB documentation and inspect the applicable Create API models. For an existing resource, read its or response. Use those sources to verify the engine variant, endpoint port, query languages, data model, authentication flow, deployment types, licensing, and Processing Engine support for the user's Region. Do not infer one engine variant's capabilities from another va…

; then\n echo \"ERROR: Invalid endpoint format (expected a hostname: letters, digits, '.', '-')\" >&2\n exit 1\nfi\nif ! [[ \"$PORT\" =~ ^[0-9]{1,5}$ ]] || [ \"$PORT\" -lt 1 ] || [ \"$PORT\" -gt 65535 ]; then\n echo \"ERROR: Invalid port (must be 1-65535)\" >&2\n exit 1\nfi\n\n# Token: prefer env var or file over positional arg (avoids exposure in ps/history)\nTOKEN=\"${POSITIONAL[2]:-${INFLUXDB_TOKEN:-}}\"\nif [ -z \"$TOKEN\" ] && [ -f \"${HOME}/.influxdb_token\" ]; then\n TOKEN=$(cat \"${HOME}/.influxdb_token\")\nfi\nDB=\"${POSITIONAL[3]:-}\"\n\nCURL_TLS_OPTS=\"\"\nif $INSECURE; then\n CURL_TLS_OPTS=\"-k\"\n echo \"WARNING: TLS certificate verification disabled (--insecure). Do not use in production.\"\nfi\n\nBASE=\"https://${ENDPOINT}:${PORT}\"\n\necho \"Checking ${BASE}...\"\n\n# Ping (no auth required)\necho -n \" /ping: \"\nHTTP_CODE=$(curl -s $CURL_TLS_OPTS -o /dev/null -w \"%{http_code}\" \"${BASE}/ping\" 2>/dev/null) || HTTP_CODE=\"FAIL\"\nif [ \"$HTTP_CODE\" = \"204\" ] || [ \"$HTTP_CODE\" = \"200\" ]; then\n echo \"OK ($HTTP_CODE)\"\nelse\n echo \"FAILED ($HTTP_CODE)\"\nfi\n\n# Health (no auth required on most versions)\necho -n \" /health: \"\nRESP=$(curl -s $CURL_TLS_OPTS -w \"\\n%{http_code}\" \"${BASE}/health\" 2>/dev/null) || RESP=\"FAIL\"\nHTTP_CODE=$(echo \"$RESP\" | tail -1)\nBODY=$(echo \"$RESP\" | head -1)\nif [ \"$HTTP_CODE\" = \"200\" ]; then\n echo \"OK — $BODY\"\nelse\n echo \"FAILED ($HTTP_CODE)\"\nfi\n\n# Authenticated query test (if token provided)\nif [ -n \"$TOKEN\" ]; then\n echo -n \" Auth test: \"\n if [ \"$PORT\" = \"8086\" ]; then\n # V2 — check /api/v2/buckets\n HTTP_CODE=$(curl -s $CURL_TLS_OPTS -o /dev/null -w \"%{http_code}\" -H \"Authorization: Token ${TOKEN}\" \"${BASE}/api/v2/buckets?limit=1\" 2>/dev/null) || HTTP_CODE=\"FAIL\"\n elif [ -n \"$DB\" ]; then\n # V3 — check /api/v3/query_sql with a real database\n HTTP_CODE=$(curl -s $CURL_TLS_OPTS -o /dev/null -w \"%{http_code}\" -H \"Authorization: Bearer ${TOKEN}\" -H \"Content-Type: application/json\" -d \"{\\\"db\\\":\\\"${DB}\\\",\\\"q\\\":\\\"SELECT 1\\\"}\" \"${BASE}/api/v3/query_sql\" 2>/dev/null) || HTTP_CODE=\"FAIL\"\n else\n echo \"SKIPPED — provide a database name as 4th arg for V3 auth test\"\n HTTP_CODE=\"\"\n fi\n if [ -n \"$HTTP_CODE\" ]; then\n if [ \"$HTTP_CODE\" = \"200\" ]; then\n echo \"OK — authenticated\"\n else\n echo \"FAILED ($HTTP_CODE) — check token\"\n fi\n fi\nfi\n\necho \"Done.\"\n","content_type":"application/x-sh; charset=utf-8","language":"bash","size":3231,"content_sha256":"ba08d59c74c9a20d2e9376caf592ee148e4905be37a67dcd992e0854270c0364"},{"filename":"scripts/input_validator.py","content":"#!/usr/bin/env python3\n\"\"\"Validate user-provided inputs before AWS CLI or API calls.\"\"\"\nimport re\nimport sys\n\nVALIDATORS = {\n \"instance_name\": (\n r\"^[a-zA-Z][a-zA-Z0-9-]{0,62}$\",\n \"Must start with letter, alphanumeric/hyphens, max 63 chars\",\n ),\n \"instance_type\": (\n r\"^db\\.influx\\.(medium|large|x?large|[0-9]+xlarge)$\",\n \"Must be db.influx.{medium|large|xlarge|Nxlarge}\",\n ),\n \"region\": (r\"^[a-z]{2}-[a-z]+-\\d$\", \"Must be valid AWS region format (e.g., us-east-1)\"),\n \"vpc_id\": (r\"^vpc-[a-f0-9]{8,17}$\", \"Must be vpc-{hex}\"),\n \"subnet_id\": (r\"^subnet-[a-f0-9]{8,17}$\", \"Must be subnet-{hex}\"),\n \"sg_id\": (r\"^sg-[a-f0-9]{8,17}$\", \"Must be sg-{hex}\"),\n \"snapshot_id\": (r\"^[a-zA-Z][a-zA-Z0-9-]{0,254}$\", \"Must start with letter, max 255 chars\"),\n \"storage_gb\": (lambda v: 20 \u003c= int(v) \u003c= 16384, \"Must be 20-16384\"),\n}\n\n\ndef validate(key, value):\n if key not in VALIDATORS:\n return True, f\"No validator for '{key}'\"\n rule = VALIDATORS[key]\n if callable(rule[0]):\n try:\n ok = rule[0](value)\n except (ValueError, TypeError):\n ok = False\n else:\n ok = bool(re.match(str(rule[0]), value))\n return ok, rule[1]\n\n\ndef validate_all(**kwargs):\n errors = []\n for k, v in kwargs.items():\n ok, msg = validate(k, v)\n if not ok:\n errors.append(f\" {k}={v} — {msg}\")\n if errors:\n print(\"Validation FAILED:\\n\" + \"\\n\".join(errors))\n return False\n print(\"All inputs valid.\")\n return True\n\n\nif __name__ == \"__main__\":\n pairs = {}\n for arg in sys.argv[1:]:\n k, v = arg.split(\"=\", 1)\n pairs[k] = v\n sys.exit(0 if validate_all(**pairs) else 1)\n","content_type":"text/x-python; charset=utf-8","language":"python","size":1720,"content_sha256":"df55d6f30933e4e35063851f7a871feb6d6ada87cae4a35dbf520ad489b7bcaa"},{"filename":"scripts/instance_types.py","content":"#!/usr/bin/env python3\n\"\"\"Timestream for InfluxDB instance type reference and sizing helper.\"\"\"\n\nINSTANCE_TYPES = {\n \"db.influx.medium\": {\"vcpu\": 1, \"memory_gib\": 8, \"network\": \"Up to 10 Gbps\"},\n \"db.influx.large\": {\"vcpu\": 2, \"memory_gib\": 16, \"network\": \"Up to 10 Gbps\"},\n \"db.influx.xlarge\": {\"vcpu\": 4, \"memory_gib\": 32, \"network\": \"Up to 10 Gbps\"},\n \"db.influx.2xlarge\": {\"vcpu\": 8, \"memory_gib\": 64, \"network\": \"Up to 10 Gbps\"},\n \"db.influx.4xlarge\": {\"vcpu\": 16, \"memory_gib\": 128, \"network\": \"Up to 10 Gbps\"},\n \"db.influx.8xlarge\": {\"vcpu\": 32, \"memory_gib\": 256, \"network\": \"10 Gbps\"},\n \"db.influx.12xlarge\": {\"vcpu\": 48, \"memory_gib\": 384, \"network\": \"12 Gbps\"},\n \"db.influx.16xlarge\": {\"vcpu\": 64, \"memory_gib\": 512, \"network\": \"20 Gbps\"},\n \"db.influx.24xlarge\": {\"vcpu\": 96, \"memory_gib\": 768, \"network\": \"25 Gbps\"},\n}\n\n\ndef list_types():\n print(f\"{'Instance Type':\u003c25} {'vCPU':>5} {'Memory (GiB)':>13} {'Network':\u003c15}\")\n print(\"-\" * 60)\n for name, spec in INSTANCE_TYPES.items():\n print(f\"{name:\u003c25} {spec['vcpu']:>5} {spec['memory_gib']:>13} {spec['network']:\u003c15}\")\n\n\ndef recommend(write_rate_per_sec: int, query_concurrency: int, data_retention_days: int):\n \"\"\"Simple sizing recommendation based on workload parameters.\"\"\"\n if write_rate_per_sec \u003c 1000 and query_concurrency \u003c 5:\n rec = \"db.influx.medium\"\n elif write_rate_per_sec \u003c 10000 and query_concurrency \u003c 20:\n rec = \"db.influx.large\"\n elif write_rate_per_sec \u003c 50000 and query_concurrency \u003c 50:\n rec = \"db.influx.xlarge\"\n elif write_rate_per_sec \u003c 100000:\n rec = \"db.influx.2xlarge\"\n else:\n rec = \"db.influx.4xlarge\"\n # Bump up for high-retention workloads (more storage and memory pressure)\n type_names = list(INSTANCE_TYPES.keys())\n idx = type_names.index(rec)\n if data_retention_days > 365:\n idx = min(idx + 2, len(type_names) - 1)\n elif data_retention_days > 90:\n idx = min(idx + 1, len(type_names) - 1)\n rec = type_names[idx]\n spec = INSTANCE_TYPES[rec]\n print(f\"Recommended: {rec} ({spec['vcpu']} vCPU, {spec['memory_gib']} GiB)\")\n print(\n f\" Based on: {write_rate_per_sec} writes/s, {query_concurrency} concurrent queries, {data_retention_days}d retention\"\n )\n print(f\" Note: This is a starting point. Monitor CloudWatch metrics and adjust.\")\n\n\nif __name__ == \"__main__\":\n import sys\n\n if len(sys.argv) > 1 and sys.argv[1] == \"recommend\":\n recommend(int(sys.argv[2]), int(sys.argv[3]), int(sys.argv[4]))\n else:\n list_types()\n","content_type":"text/x-python; charset=utf-8","language":"python","size":2580,"content_sha256":"cb898becef2d9ecd8ecc407d3c750453490afd3c2de4057d03067daf94dc89f7"}],"content_json":{"type":"doc","content":[{"type":"heading","attrs":{"level":1},"content":[{"text":"Amazon Timestream for InfluxDB","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"Amazon Timestream for InfluxDB is a managed time-series database with engine variants and deployment types whose capabilities differ. Before comparing them, retrieve the Timestream for InfluxDB documentation and inspect the applicable Create API models. For an existing resource, read its ","type":"text"},{"text":"GetDbInstance","type":"text","marks":[{"type":"code_inline"}]},{"text":" or ","type":"text"},{"text":"GetDbCluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" response. Use those sources to verify the engine variant, endpoint port, query languages, data model, authentication flow, deployment types, licensing, and Processing Engine support for the user's Region. Do not infer one engine variant's capabilities from another variant or from examples in this skill.","type":"text"}]},{"type":"paragraph","content":[{"text":"For new workloads, verify the supported engine variants and recommend InfluxDB 3 when the service documentation identifies it as an option. For existing V2 deployments, verify V2 support before advising whether to stay on V2 or migrate.","type":"text"}]},{"type":"paragraph","content":[{"text":"Advisory in nature: it recommends actions and provides the AWS CLI and API commands to carry them out (including mutations such as instance/cluster creation and tagging). It does not act autonomously — it executes mutations only in response to an explicit user request, never on its own initiative.","type":"text"}]},{"type":"paragraph","content":[{"text":"Tooling:","type":"text","marks":[{"type":"strong"}]},{"text":" The AWS MCP server is recommended for streamlined AWS API interactions but is not required. All examples use standard AWS CLI syntax and can run without MCP.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Common Tasks","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"1. Verify Dependencies","type":"text"}]},{"type":"paragraph","content":[{"text":"Before any guidance, confirm tooling and engine variant.","type":"text"}]},{"type":"paragraph","content":[{"text":"Constraints:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"You MUST confirm which engine variant the user runs (V2, V2 Read Replica, or V3) before giving advice specific to that engine variant — APIs and defaults differ.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"You MUST NOT mix V2 APIs (Flux, orgs, buckets, port 8086) with V3 APIs (SQL/InfluxQL, databases, tables, port 8181).","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"You MUST verify the AWS CLI (or ","type":"text"},{"text":"call_aws","type":"text","marks":[{"type":"code_inline"}]},{"text":") is available before provisioning guidance.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"You MUST inspect the Create API and ask for all required parameters upfront, including engine variant, Region, VPC/subnet IDs, name, instance type, and a supported encryption choice. For production V3 workloads, verify customer-managed KMS key support in that API before recommending it for customer-controlled policy, rotation, revocation, and CloudTrail visibility. Collect an identifier in a form that API accepts.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Tool call examples:","type":"text","marks":[{"type":"strong"}]}]},{"type":"code_block","attrs":{"wrap":false,"language":""},"content":[{"text":"aws timestream-influxdb list-db-instances --region us-east-1\naws timestream-influxdb list-db-clusters --region us-east-1","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Resource tagging (always apply on resource creation)","type":"text"}]},{"type":"paragraph","content":[{"text":"When creating any cluster or instance (","type":"text"},{"text":"create-db-cluster","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"create-db-instance","type":"text","marks":[{"type":"code_inline"}]},{"text":"), ALWAYS include these tags:","type":"text"}]},{"type":"paragraph","content":[{"text":"--tags Key=created_by,Value=timestream-skill Key=generation_model,Value={your-model-id}","type":"text","marks":[{"type":"code_inline"}]}]},{"type":"paragraph","content":[{"text":"Example: ","type":"text"},{"text":"--tags Key=created_by,Value=timestream-skill Key=generation_model,Value=claude-sonnet-4-20250514","type":"text","marks":[{"type":"code_inline"}]}]},{"type":"paragraph","content":[{"text":"Include these tags even if the user does not mention tagging, so that they can identify the resources created via this skill. If the user provides additional tags, append these to their tags rather than replacing them.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"2. Select the right engine variant","type":"text"}]},{"type":"paragraph","content":[{"text":"Decision flow:","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"New workload","type":"text","marks":[{"type":"strong"}]},{"text":" → InfluxDB 3 Core (Enterprise for HA multi-node).","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Existing V2 migrating to AWS","type":"text","marks":[{"type":"strong"}]},{"text":" → InfluxDB 2 (or Read Replica Cluster if read-heavy).","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"High cardinality (>10M series) or SQL","type":"text","marks":[{"type":"strong"}]},{"text":" → InfluxDB 3.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Need Processing Engine","type":"text","marks":[{"type":"strong"}]},{"text":" → InfluxDB 3.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Before providing provisioning guidance for InfluxDB 3 or a V2 Read Replica Cluster, you MUST load and follow the creation, licensing, IAM, and networking contracts for that engine variant in the ","type":"text"},{"text":"getting-started guide","type":"text","marks":[{"type":"link","attrs":{"href":"references/getting-started.md","title":null}}]},{"text":". For V3 encryption choices, customer-managed KMS key policy, migration, or key lifecycle guidance, load ","type":"text"},{"text":"encryption guidance","type":"text","marks":[{"type":"link","attrs":{"href":"references/encryption.md","title":null}}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"Provisioning and operational contracts you MUST follow:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"InfluxDB 3 Core creation contract:","type":"text","marks":[{"type":"strong"}]},{"text":" For a new V3 Core workload, use ","type":"text"},{"text":"create-db-cluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" with the exact default parameter-group identifier ","type":"text"},{"text":"InfluxDBV3Core","type":"text","marks":[{"type":"code_inline"}]},{"text":". Do not use ","type":"text"},{"text":"create-db-instance","type":"text","marks":[{"type":"code_inline"}]},{"text":", and do not pass the V2-only ","type":"text"},{"text":"allocatedStorage","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"dbStorageType","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"deploymentType","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"username","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"password","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"organization","type":"text","marks":[{"type":"code_inline"}]},{"text":", or ","type":"text"},{"text":"bucket","type":"text","marks":[{"type":"code_inline"}]},{"text":" fields. Core connects on port 8181. Before provisioning, verify Core's current Marketplace and licensing prerequisites in the Timestream for InfluxDB documentation and current ","type":"text"},{"text":"CreateDbCluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" API model; never inherit requirements from V2, Read Replica, or Enterprise. If an installed CLI or SDK model does not expose the V3 Core creation contract, update that tooling; never fall back to the V2 creation operation or fields.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Core→Enterprise upgrade IS supported","type":"text","marks":[{"type":"strong"}]},{"text":" via AWS Console or AWS Support. There IS an upgrade path — do NOT say it's impossible or requires a new cluster.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Encryption mutability:","type":"text","marks":[{"type":"strong"}]},{"text":" Verify ","type":"text"},{"text":"kmsKeyId","type":"text","marks":[{"type":"code_inline"}]},{"text":" in the Create and Update API models before asserting whether a key can change; follow \"Choose the Key Before Creation\" in ","type":"text"},{"text":"encryption guidance","type":"text","marks":[{"type":"link","attrs":{"href":"references/encryption.md","title":null}}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Encryption scope and key loss:","type":"text","marks":[{"type":"strong"}]},{"text":" Retrieve the Data protection documentation and report only the details the user requests; follow \"Response Scope\" and \"Existing Clusters and Key Loss\" in ","type":"text"},{"text":"encryption guidance","type":"text","marks":[{"type":"link","attrs":{"href":"references/encryption.md","title":null}}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Key verification:","type":"text","marks":[{"type":"strong"}]},{"text":" Confirm a specific customer-managed KMS key only by matching the returned ARN to the requested key ARN. Interpret an absent ","type":"text"},{"text":"kmsKeyId","type":"text","marks":[{"type":"code_inline"}]},{"text":" only when the current ","type":"text"},{"text":"GetDbCluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" response documentation explicitly defines its semantics; never use absence to identify a specific customer-managed KMS key. Follow \"Verify the Key\" in ","type":"text"},{"text":"encryption guidance","type":"text","marks":[{"type":"link","attrs":{"href":"references/encryption.md","title":null}}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Creation completion:","type":"text","marks":[{"type":"strong"}]},{"text":" After ","type":"text"},{"text":"create-db-cluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" returns, poll ","type":"text"},{"text":"get-db-cluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" until it reports ","type":"text"},{"text":"AVAILABLE","type":"text","marks":[{"type":"code_inline"}]},{"text":" or a terminal failure. Do not report creation complete or ask the user to take over polling while the cluster remains ","type":"text"},{"text":"CREATING","type":"text","marks":[{"type":"code_inline"}]},{"text":". For a customer-managed key request, success also requires the returned ","type":"text"},{"text":"kmsKeyId","type":"text","marks":[{"type":"code_inline"}]},{"text":" ARN to match the requested key ARN; an absent value while the cluster is transitioning is unverified and MUST be checked again at ","type":"text"},{"text":"AVAILABLE","type":"text","marks":[{"type":"code_inline"}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Retrieve the V3 initial-token secret by ARN:","type":"text","marks":[{"type":"strong"}]},{"text":" Inspect the ","type":"text"},{"text":"GetDbCluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" output or API reference for the token-secret ARN field, then pass the returned ARN to AWS Secrets Manager. Never derive the secret identifier from a naming convention. V3 uses ","type":"text"},{"text":"Authorization: Bearer \u003ctoken>","type":"text","marks":[{"type":"code_inline"}]},{"text":" (NOT ","type":"text"},{"text":"Token","type":"text","marks":[{"type":"code_inline"}]},{"text":"). V2 uses ","type":"text"},{"text":"Authorization: Token \u003ctoken>","type":"text","marks":[{"type":"code_inline"}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"reboot-db-cluster","type":"text","marks":[{"type":"code_inline"},{"type":"strong"}]},{"text":" supports ","type":"text"},{"text":"--instance-ids","type":"text","marks":[{"type":"code_inline"}]},{"text":" for targeting specific nodes. Before using it, verify the current maximum number of IDs and all request constraints in the ","type":"text"},{"text":"RebootDbCluster","type":"text","marks":[{"type":"code_inline"}]},{"text":" API model and Timestream for InfluxDB documentation. Do NOT say no reboot command exists or assume a fixed node-count limit.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Before asserting S3 log-delivery availability or configuration paths, verify the create and update API request parameters and the Timestream for InfluxDB log-delivery documentation.","type":"text","marks":[{"type":"strong"}]},{"text":" Use only the operations, service principal, and bucket-policy requirements those sources document.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Do NOT invent CloudWatch metric names.","type":"text","marks":[{"type":"strong"}]},{"text":" Load ","type":"text"},{"text":"monitoring operations","type":"text","marks":[{"type":"link","attrs":{"href":"references/monitoring-operations.md","title":null}}]},{"text":" and ","type":"text"},{"text":"metric discovery","type":"text","marks":[{"type":"link","attrs":{"href":"references/monitoring-metrics.md","title":null}}]},{"text":", then verify availability for the selected engine variant and deployment type. If unsure whether a metric exists, say so explicitly.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Before asserting backup or restore availability, verify the Timestream for InfluxDB CLI or SDK API model and the ","type":"text","marks":[{"type":"strong"}]},{"text":"customer-managed backup and restore documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/timestream/latest/developerguide/influxdb3-customer-managed-backup-restore.html","title":null}},{"type":"strong"}]},{"text":".","type":"text","marks":[{"type":"strong"}]},{"text":" Confirm support by engine variant and Region for on-demand, scheduled, continuous, point-in-time, and self-service restore capabilities. Use ","type":"text"},{"text":"DbBackup","type":"text","marks":[{"type":"code_inline"}]},{"text":" terminology for ","type":"text"},{"text":"DbBackup","type":"text","marks":[{"type":"code_inline"}]},{"text":" resources, never \"snapshot,\" and separately verify the accessibility and recovery path for service-managed snapshots.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"--publicly-accessible","type":"text","marks":[{"type":"code_inline"},{"type":"strong"}]},{"text":" is a supported option at instance/cluster creation time. Do NOT say the service is exclusively VPC-only — public access is an opt-in feature.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"3. Design the schema (tags vs fields)","type":"text"}]},{"type":"paragraph","content":[{"text":"Tags","type":"text","marks":[{"type":"strong"}]},{"text":" (indexed, used in WHERE/GROUP BY): ","type":"text"},{"text":"MUST","type":"text","marks":[{"type":"strong"}]},{"text":" be low-cardinality like ","type":"text"},{"text":"method","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"region","type":"text","marks":[{"type":"code_inline"}]},{"text":", ","type":"text"},{"text":"status_code","type":"text","marks":[{"type":"code_inline"}]},{"text":". High-cardinality values (user IDs, request IDs, trace IDs) ","type":"text"},{"text":"MUST","type":"text","marks":[{"type":"strong"}]},{"text":" be fields, not tags — making them tags explodes series cardinality and cripples query performance.","type":"text"}]},{"type":"paragraph","content":[{"text":"Fields","type":"text","marks":[{"type":"strong"}]},{"text":" (not indexed): numeric measurements, high-cardinality strings, binary data.","type":"text"}]},{"type":"paragraph","content":[{"text":"InfluxDB 3","type":"text","marks":[{"type":"strong"}]},{"text":" handles high cardinality better than V2, but tag design affects query performance. Load the ","type":"text"},{"text":"schema-design guide","type":"text","marks":[{"type":"link","attrs":{"href":"references/schema-design-guide.md","title":null}}]},{"text":" for patterns including deduplication and retention.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"4. Migrate from LiveAnalytics","type":"text"}]},{"type":"paragraph","content":[{"text":"LiveAnalytics is in maintenance mode. For migration to InfluxDB 3:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"\u003c1B records / \u003c125GB","type":"text","marks":[{"type":"strong"}]},{"text":": Use the ","type":"text"},{"text":"certified LiveAnalytics Migration plugin","type":"text","marks":[{"type":"strong"}]},{"text":" with the migration client. Exports to S3 (Parquet), re-ingests into V3.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":">1B records","type":"text","marks":[{"type":"strong"}]},{"text":": Contact the AWS account team — no self-service path exists for larger migrations.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Load the ","type":"text"},{"text":"migration guide","type":"text","marks":[{"type":"link","attrs":{"href":"references/migration-guide.md","title":null}}]},{"text":" for the procedure.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"5. Use Processing Engine plugins (V3 only)","type":"text"}]},{"type":"paragraph","content":[{"text":"Before listing plugins or describing custom-plugin support, retrieve the certified plugin catalog and support statement from the Timestream for InfluxDB Processing Engine documentation or a documented catalog API. State only what the retrieved source confirms: do not assert a fixed plugin count, name a plugin absent from the retrieved catalog, or infer service availability from a general InfluxDB plugin repository. Load the ","type":"text"},{"text":"processing-engine guide","type":"text","marks":[{"type":"link","attrs":{"href":"references/processing-engine-guide.md","title":null}}]},{"text":" for verified trigger and configuration guidance.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"6. Monitor and operate","type":"text"}]},{"type":"paragraph","content":[{"text":"Load ","type":"text"},{"text":"monitoring operations","type":"text","marks":[{"type":"link","attrs":{"href":"references/monitoring-operations.md","title":null}}]},{"text":" and ","type":"text"},{"text":"metric discovery","type":"text","marks":[{"type":"link","attrs":{"href":"references/monitoring-metrics.md","title":null}}]},{"text":" before giving metric, alarm, maintenance, backup, or restore guidance. Verify metric names and dimensions from the service documentation and the resource's CloudWatch telemetry before configuring alarms. Verify maintenance request shapes, backup and restore capabilities, and service quotas in their respective API models rather than relying on embedded examples or fixed availability claims.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Troubleshooting","type":"text"}]},{"type":"paragraph","content":[{"text":"Confirm the engine variant and deployment/access type, then load the ","type":"text"},{"text":"troubleshooting runbook","type":"text","marks":[{"type":"link","attrs":{"href":"references/troubleshooting-runbook.md","title":null}}]},{"text":" for verified triage specific to that engine variant across connectivity, write/query, storage, replication, and S3 endpoint issues. Never mix V2 and V3 remediation or assert a cause before completing the runbook's verification steps.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Security Considerations","type":"text"}]},{"type":"paragraph","content":[{"text":"Apply these baseline controls in every environment:","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Over-privileged IAM:","type":"text","marks":[{"type":"strong"}]},{"text":" Use least-privilege roles and remove temporary broad permissions immediately after activation.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Password or token exposure:","type":"text","marks":[{"type":"strong"}]},{"text":" Store the V2 initial password and V3 initial token in AWS Secrets Manager; never place them in source, logs, shell history, or literal command arguments. Rotate or replace each through the workflow documented for its engine variant, and issue a scoped application token per workload.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"VPC misconfiguration:","type":"text","marks":[{"type":"strong"}]},{"text":" Prefer private networking and restrict every security-group rule to trusted CIDRs or security-group IDs; never allow ","type":"text"},{"text":"0.0.0.0/0","type":"text","marks":[{"type":"code_inline"}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Encryption gaps:","type":"text","marks":[{"type":"strong"}]},{"text":" Require encryption at rest and TLS in transit. Verify supported key options in the Data protection documentation and API model before selecting a customer-managed KMS key.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Audit gaps:","type":"text","marks":[{"type":"strong"}]},{"text":" Enable CloudTrail, supported service log delivery, and operational alarms. Protect CloudTrail S3 objects, CloudWatch Logs, and alarm topics with SSE-KMS, and enable CloudTrail log-file validation.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"You MUST load and follow ","type":"text"},{"text":"security best practices","type":"text","marks":[{"type":"link","attrs":{"href":"references/security-best-practices.md","title":null}}]},{"text":" for every deployment, including development, experimentation, and production, before providing provisioning or operational guidance.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Additional Resources","type":"text"}]},{"type":"bullet_list","content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Timestream for InfluxDB Developer Guide","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/timestream/latest/developerguide/","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security in Timestream for InfluxDB","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/timestream/latest/developerguide/security-timestream-for-influxdb.html","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Security best practices for Timestream for InfluxDB","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/timestream/latest/developerguide/security-best-practices.html","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Timestream for InfluxDB Pricing","type":"text","marks":[{"type":"link","attrs":{"href":"https://aws.amazon.com/timestream/pricing/","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"InfluxDB 3 Documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.influxdata.com/influxdb3/","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Schema Design Best Practices","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.aws.amazon.com/timestream/latest/developerguide/schema-design-best-practices.html","title":null}}]}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Processing Engine Documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.influxdata.com/influxdb3/cloud-dedicated/process-data/process-engine/","title":null}}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Handoff from aws-database-selection","type":"text"}]},{"type":"paragraph","content":[{"text":"This skill can be invoked directly, or it can be entered from the ","type":"text"},{"text":"aws-database-selection","type":"text","marks":[{"type":"code_inline"}]},{"text":" parent skill after that skill has run a requirements interview and produced a ","type":"text"},{"text":"requirements.json","type":"text","marks":[{"type":"code_inline"}]},{"text":" artifact. When you see a backtick-wrapped path matching ","type":"text"},{"text":"aws_dbs_requirements/*/requirements.json","type":"text","marks":[{"type":"code_inline"}]},{"text":" in recent conversation, follow the entry protocol in ","type":"text"},{"text":"aws-database-selection/references/handoff-contract.md","type":"text","marks":[{"type":"code_inline"}]},{"text":":","type":"text"}]},{"type":"ordered_list","attrs":{"order":1,"listStyle":"number"},"content":[{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Read the artifact using ","type":"text"},{"text":"file_read","type":"text","marks":[{"type":"code_inline"}]},{"text":".","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Validate it against ","type":"text"},{"text":"aws-database-selection/references/workload-primary-artifact.schema.json","type":"text","marks":[{"type":"code_inline"}]},{"text":". If malformed or unreadable, tell the user and proceed without it.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Acknowledge what's relevant in one or two ","type":"text"},{"text":"bold","type":"text","marks":[{"type":"strong"}]},{"text":" sentences, citing high-level facts from the artifact (dominant shapes, hard constraints, migration context) — do not parrot the entire artifact back.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Scope-check: this skill is scoped to Amazon Timestream for InfluxDB (V2, V2 Read Replica, V3) — engine variant selection, schema design, migration from LiveAnalytics, Processing Engine plugins. If the artifact's ","type":"text"},{"text":"workload_primaries.dominant_shapes","type":"text","marks":[{"type":"code_inline"}]},{"text":" or ","type":"text"},{"text":"migration_context","type":"text","marks":[{"type":"code_inline"}]},{"text":" don't match that scope, emit weak backpressure per the handoff contract: suggest ","type":"text"},{"text":"dynamodb-skill","type":"text","marks":[{"type":"code_inline"}]},{"text":" for non-InfluxDB time-series on DynamoDB, or go back to ","type":"text"},{"text":"aws-database-selection","type":"text","marks":[{"type":"code_inline"}]},{"text":" if the dominant shape isn't time-series, then ask the user whether to go back or proceed anyway. Do not silently misuse the artifact.","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","content":[{"text":"Proceed with this skill's native workflow, citing artifact paths as evidence when recommendations are grounded in the requirements.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"All user-facing output from this skill follows the markdown-primitives-only formatting convention in the handoff contract: bold labels, backticks for paths and enum values, bullet lists for alternatives, no ASCII art or box-drawing characters.","type":"text"}]}]},"metadata":{"date":"2026-11-02","name":"timestream-influxdb","author":"@skillopedia","source":{"stars":3376,"repo_name":"agent-toolkit-for-aws","origin_url":"https://github.com/aws/agent-toolkit-for-aws/blob/HEAD/skills/specialized-skills/database-skills/timestream-influxdb/SKILL.md","repo_owner":"aws","body_sha256":"d4bca9a71cd70c6fa48b4730558716041dbe5dc73c350c6d030708a240ca6569","cluster_key":"be8307d1b9315d15a4f19437b86fe250d490b2801bb7fd3fb09d9fba1ad9c27a","clean_bundle":{"format":"clean-skill-bundle-v1","source":"aws/agent-toolkit-for-aws/skills/specialized-skills/database-skills/timestream-influxdb/SKILL.md","text_bytes":90041,"source_commit":"1761e96813ebcbd43ed81d19e837219033f0afe5","skills_sh_rank":4740,"attachment_count":14,"text_attachments":14,"attachment_storage":"skill_attachments","binary_attachments":0},"cluster_size":1,"skill_md_path":"skills/specialized-skills/database-skills/timestream-influxdb/SKILL.md","import_metadata":{"date":"2026-11-02","author":"@skillopedia","version":"v1","category":"data-analytics","category_label":"Data"},"exact_dupes_collapsed_into_this":0},"version":"v1","category":"data-analytics","import_tag":"skills-sh-top20k-2026-11","description":"Retrieves authoritative guidance on Amazon Timestream for InfluxDB across its supported engine variants. Applicable to any InfluxDB-on-AWS request including engine variant and licensing selection, provisioning and IAM, encryption at rest (AWS-owned and customer-managed KMS keys, key policies, and key lifecycle), schema design (tags vs fields, cardinality, HTTP/sensor/metric data modeling), migration from LiveAnalytics, Processing Engine plugins, connectivity (database endpoints and private or public access), and write/query errors."}},"renderedAt":1793671710226}

Important: agents should read /llm.txt, /llms.txt, or /.well-known/skills.json to discover the public Skillopedia API.