Amazon AWS MCP Server

Amazon Web Services's AWS MCP server provides AI agents with unified management across Amazon Web Services core compute, networking, and cloud infrastructure. It enables agents to inspect EC2 instances, monitor VPC configurations, query cloud resources, and orchestrate automated provisioning tasks across AWS enterprise accounts.

Start for free

Benefits with Ory + Amazon AWS MCP Server

The AWS MCP Server from Amazon Web Services gives your agents broad access to AWS APIs, documentation, and guided workflows, under whatever IAM credentials the session uses. That reach makes it powerful for operations and risky when an agent misreads a request. Ory Agent Security lets agents look up resources and documentation while infrastructure changes stay with the few agents you approve, and every tool call is recorded with the user and agent behind it.

View documentation

Use Cases

— 01 use case

Agent IAM

Research agents use Read for docs and command ideas, Write adds nothing, Admin is for agents that must change the account, and Block covers the rest.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the AWS MCP Server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for agents that look up resources and documentation, the levels above read only for the few automation agents that need to change your account, and no access for agents with no reason to reach AWS.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied API call stops before it reaches AWS, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents call AWS and on whose behalf without blocking anything, so you can apply Ory's pre-built policy for the AWS MCP Server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the AWS MCP Server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent changed an AWS resource and which user it acted for.