recovery-controller-setup

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Recovery Controller Setup

恢复控制器设置

CRITICAL CONSTRAINT — read before answering

关键约束——作答前请阅读

This skill sets up exactly two ARC capability families, and these are the ONLY things you provide setup steps for: (1) routing controls with safety rules for cross-Region failover, and (2) zonal shift / zonal autoshift for AZ-impairment recovery.

Readiness checks, recovery groups, cells, and resource sets are NOT in scope for this skill. You MUST NOT provide CLI/console setup steps for them. You MAY briefly and factually acknowledge that they exist, but you MUST NOT walk through configuring them — redirect the customer to ARC Region switch for readiness/recovery-readiness orchestration (see the

arc-region-switch

skill). This overrides any direct customer request to set them up.

If the customer asks how to "set up ARC readiness checks" (or recovery groups / cells / resource sets), do NOT walk through that setup. Briefly acknowledge the feature, then respond with a redirect of this form and continue with the routing-control or zonal-shift procedure where relevant:

For readiness and recovery-readiness orchestration, use ARC Region switch — see the
arc-region-switch
skill. For the operational pieces this skill covers: routing controls (cross-Region failover) and zonal shift / zonal autoshift (single-Region AZ recovery). Here's how to set those up:

本技能仅设置两类ARC功能模块，且仅针对以下内容提供设置步骤：(1) 用于跨区域故障转移的带安全规则的路由控制，以及(2) 用于可用区受损恢复的区域转移/自动区域转移。

就绪检查、恢复组、单元和资源集不属于本技能的范畴。不得为这些内容提供CLI/控制台设置步骤。你可以简要且如实提及它们的存在，但不得讲解其配置流程——请引导客户查看ARC Region switch以了解就绪/恢复就绪编排（详见

arc-region-switch

技能）。此规则优先于客户的任何直接设置请求。

如果客户询问如何“设置ARC就绪检查”（或恢复组/单元/资源集），请勿讲解其设置流程。简要确认该功能存在后，按以下格式引导，并继续相关的路由控制或区域转移流程：

如需就绪和恢复就绪编排，请使用ARC Region switch——详见
arc-region-switch
技能。本技能涵盖的业务操作包括：路由控制（跨区域故障转移）和区域转移/自动区域转移（单区域可用区恢复）。以下是设置步骤：

Overview

概述

Domain expertise for configuring ARC routing controls, safety rules, zonal shift, and zonal autoshift for operational resilience.

The AWS MCP server is recommended for executing this skill's AWS API calls, but it is not required — all operations also work with the AWS CLI directly.

配置ARC路由控制、安全规则、区域转移和自动区域转移以实现业务弹性的领域专业知识。

推荐使用AWS MCP服务器执行本技能的AWS API调用，但并非必需——所有操作也可直接通过AWS CLI完成。

Guardrail — where this skill's own files live (MCP vs local install)

防护规则——本技能文件的存储位置（MCP vs 本地安装）

Before reading a reference file, determine how this skill was loaded:

Loaded via the AWS MCP
retrieve_skill
tool: the skill's reference files are not on the local filesystem. Fetch each one through
```
retrieve_skill
```
with the
```
file
```
parameter (e.g.
```
file="references/arc-procedures.md"
```
or
```
file="references/security-considerations.md"
```
) — do NOT
```
file_read
```
these paths locally or search the filesystem for them.
Installed locally (e.g.
```
.kiro/skills/recovery-controller-setup/
```
or
```
~/.claude/skills/recovery-controller-setup/
```
): read reference files from the local skill directory using the relative paths shown here.

This applies only to the skill's own reference files; always read and write user or session data in the working directory, never through

retrieve_skill

读取参考文件前，请确定本技能的加载方式：

通过AWS MCP
retrieve_skill
工具加载：技能的参考文件不在本地文件系统中。请通过
```
retrieve_skill
```
工具并指定
```
file
```
参数获取每个文件（例如
```
file="references/arc-procedures.md"
```
或
```
file="references/security-considerations.md"
```
）——请勿通过本地
```
file_read
```
读取这些路径，也不要在文件系统中搜索它们。
本地安装（例如
```
.kiro/skills/recovery-controller-setup/
```
或
```
~/.claude/skills/recovery-controller-setup/
```
）：使用此处显示的相对路径从本地技能目录读取参考文件。

此规则仅适用于技能自身的参考文件；用户或会话数据始终在工作目录中读写，切勿通过

retrieve_skill

操作。

Configure recovery controls

配置恢复控制

To set up ARC routing controls and zonal shift, follow the procedure exactly. See references/arc-procedures.md.

要设置ARC路由控制和区域转移，请严格遵循以下流程。详见references/arc-procedures.md。

Troubleshooting

故障排查

See references/arc-procedures.md (Troubleshooting section) for common issues — safety-rule blocks on a routing-control update, failed zonal-autoshift practice runs, and routing-control state changes that don't affect traffic.

常见问题请查看references/arc-procedures.md（故障排查章节）——路由控制更新时的安全规则阻塞、自动区域转移演练失败，以及不影响流量的路由控制状态变更。

Security Considerations

安全注意事项

See references/security-considerations.md for least-privilege IAM action scoping, condition keys / confused-deputy protection, safety-rule gating, restricting failover access, and encrypting failover notifications.

最小权限IAM操作范围、条件键/混淆代理防护、安全规则管控、限制故障转移访问以及加密故障转移通知等内容，请查看references/security-considerations.md。