Aws Service Authorization Reference

🚀 AWS Service Reference Information MCP Server

A Model Context Protocol (MCP) server that provides access to AWS service reference information. This server allows Large Language Models (LLMs) to retrieve IAM actions, resources, and condition keys.

🚀 Quick Start

Blog Posts!

Here is a series of blog posts introducing this tool:

• (Part 1) Introducing AWS Service Reference Information MCP Server
• (Part 2) AWS Service Reference Information MCP Server: How Up-to-Date Scoped Reference Data Helps Deliver Better Answers

What is the AWS Service Authorization Reference?

The AWS Service Authorization Reference is a document available here, where AWS provides comprehensive reference data on all IAM actions, resources, and condition keys, consolidating information previously scattered across multiple service documents.

In 2024, AWS added programmatic support for accessing this data.

As of March 13, 2025, the service reference information includes resources and condition keys.

Available Tools

• service_codes - Lists all service codes with available documentation.
• service_stats - Tells us how many actions, resources, and condition keys are documented for a service.
  • service (string, required): The code of the service.
• service_actions - A comma-separated list of all actions for a service.
  • service (string, required): The code of the service.
• service_resources - A comma-separated list of all resources for a service.
  • service (string, required): The code of the service.
• service_condition_keys - A comma-separated list of all condition keys for a service.
  • service (string, required): The code of the service.
• service_action_information - Retrieves authorization reference data (resources and condition keys) for a single AWS service action.
  • service (string, required): The code of the service.
  • action (string, required): The code of the action.
• service_resource_information - Retrieves authorization reference data (resources and condition keys) for a single AWS service resource.
  • service (string, required): The code of the service.
  • resource (string, required): The code of the resource.
• service_condition_key_information - Retrieves authorization reference data for a single AWS service condition key.
  • service (string, required): The code of the service.
  • condition_key (string, required): The name of the condition key.

📦 Installation

To install the MCP server, follow these steps:

Basic Usage

# Clone the repository
git clone https://github.com/your-repository/mcp-server.git
cd mcp-server

# Install dependencies
pip install -r requirements.txt

# Start the server
python server.py

📚 Documentation

Configuration

To configure the MCP server on AWS, follow these steps:

1. Create an IAM role and attach appropriate policies.
2. Deploy the server container in Amazon ECS or Amazon EKS.

Debugging

To debug using the MCP inspector:

mcp-inspector inspect --endpoint http://localhost:5000

📄 License

This project is licensed under the MIT License. For more details, see the LICENSE file.