Amazon AWS IAM MCP Server

Amazon Web Services's AWS IAM MCP server allows AI agents to inspect IAM policies, audit role permissions, list users and groups, and read inline policies. It empowers security agents to verify least-privilege access, simulate principal policies, and identify policy misconfigurations across AWS accounts.

Start for free

Benefits with Ory + Amazon AWS IAM MCP Server

Amazon Web Services' AWS IAM MCP server lets your agents inspect IAM users, roles, groups, and policies, simulate policy decisions, and, when write access is enabled, create and change them. IAM defines access across your AWS account, so a mistake here can widen it everywhere. Ory Agent Security lets security agents audit IAM while changes stay with the provisioning agents you approve.

View documentation

Use Cases

— 01 use case

Agent IAM

Recommendation agents audit at Read, Write grants nothing extra, only a trusted agent gets Admin to change users and policies, and Block covers everyone else.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the AWS IAM MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for security agents that audit access, the levels above read only for provisioning agents your security team owns, and no access for agents with no security role.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied policy change stops before it reaches IAM, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents read or change IAM and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the AWS IAM MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the AWS IAM MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed a policy and for which user.