AWS

AWS identity, compute, storage, serverless, observability, messaging, and cost operations.

Agent markdown

CloudCloud infrastructureIdentitySecurity

Connection

Model: AWS access key
Credential owner: Customer credentials
Auth kind: AWS access key

Setup

Last verified: 2026-07-16
Upstream docs: IAM security best practices
Manage IAM user access keys
STS GetCallerIdentity
AWS commercial Regions

Open setup guide

Actions

41 total — 29 read, 8 write, 4 destructive · REST 41 · SDK 41 · MCP 28

View action index

Scopes

Scope	Actions
`ce:GetCostAndUsage`	`cost_explorer.cost_and_usage.get`
`cloudwatch:DescribeAlarms`	`cloudwatch.alarms.list`
`cloudwatch:GetMetricData`	`cloudwatch.metric_data.get`
`ec2:DescribeInstances`	`ec2.instances.describe`
`ec2:StartInstances`	`ec2.instances.start`
`ec2:StopInstances`	`ec2.instances.stop`
`iam:AddUserToGroup`	`iam.groups.members.add`
`iam:CreateUser`	`iam.users.create`
`iam:GenerateCredentialReport`	`iam.credential_reports.generate`
`iam:GetAccessKeyLastUsed`	`iam.access_keys.last_used.get`
`iam:GetCredentialReport`	`iam.credential_reports.get`
`iam:GetGroup`	`iam.groups.members.list`
`iam:GetPolicy`	`iam.managed_policies.get`
`iam:GetPolicyVersion`	`iam.managed_policy_versions.get`
`iam:GetRole`	`iam.roles.get`
`iam:GetUser`	`iam.users.get`
`iam:ListAccessKeys`	`iam.users.access_keys.list`
`iam:ListAttachedGroupPolicies`	`iam.groups.attached_managed_policies.list`
`iam:ListAttachedRolePolicies`	`iam.roles.attached_managed_policies.list`
`iam:ListAttachedUserPolicies`	`iam.users.attached_managed_policies.list`
`iam:ListGroups`	`iam.groups.list`
`iam:ListGroupsForUser`	`iam.users.groups.list`
`iam:ListMFADevices`	`iam.users.mfa_devices.list`
`iam:ListPolicies`	`iam.managed_policies.list`
`iam:ListRoles`	`iam.roles.list`
`iam:ListUsers`	`iam.users.list`
`iam:RemoveUserFromGroup`	`iam.groups.members.remove`
`iam:SimulatePrincipalPolicy`	`iam.principal_policy.simulate`
`iam:TagUser`	`iam.users.create`
`iam:UpdateAccessKey`	`iam.users.access_keys.deactivate`
`lambda:InvokeFunction`	`lambda.functions.invoke_sync` `lambda.functions.invoke_async`
`lambda:ListFunctions`	`lambda.functions.list`
`logs:FilterLogEvents`	`cloudwatch_logs.events.filter`
`rds:DescribeDBInstances`	`rds.db_instances.describe` `rds.db_instances.start` `rds.db_instances.stop`
`rds:StartDBInstance`	`rds.db_instances.start`
`rds:StopDBInstance`	`rds.db_instances.stop`
`s3:GetObject`	`s3.objects.presign_get`
`s3:ListAllMyBuckets`	`s3.buckets.list`
`s3:ListBucket`	`s3.objects.list`
`s3:PutObject`	`s3.objects.presign_put`
`sqs:SendMessage`	`sqs.messages.send`

AAWS

Connection

Setup

Actions

Scopes

On this page