aws-security-mcp
AWS Security MCP is a Model Context Protocol server designed for AI assistants to inspect and analyze AWS infrastructure for security issues. It supports querying various AWS services for security findings and provides features like threat modeling and network visualization. This tool helps automate and enhance the security management of AWS environments.
What AWS services are supported by AWS Security MCP?
AWS Security MCP supports IAM, EC2, S3, GuardDuty, SecurityHub, Lambda, Cloudfront, LoadBalancer, Route53, WAF, Shield, IAM Access Analyser, ECS/ECR, and Organizations. Work is in progress for CloudTrail, KMS, and Config.
What are the prerequisites for installing AWS Security MCP?
You need Python 3.11+, uv, an AWS account with proper credentials, and an MCP Client like Claude Desktop.
How can I set up Claude Desktop as an AWS Security MCP client?
Edit the claude_desktop_config.json
file in Claude Desktop settings to include the AWS Security MCP command path.
Can AWS Security MCP work with AWS STS Credentials?
Yes, AWS Security MCP can work with AWS STS Credentials. You need to export them before running the MCP Client.
Where can I find the logs if I face issues with AWS Security MCP?
MCP Server logs are usually stored in /Users/{userName}/Library/Logs/Claude
.