MCP ConfigsMar 31, 2026·2 min read

AWS MCP Servers — Official AWS Integration

Official MCP servers for AWS by Amazon. Connect AI agents to S3, Lambda, CloudWatch, Bedrock, CDK, and more AWS services. Secure IAM-based auth. 8.6K+ stars.

TL;DR
Official MCP servers by Amazon let AI agents interact with S3, Lambda, CloudWatch, Bedrock, CDK, and other AWS services securely.
§01

What it is

AWS MCP Servers are a collection of official Model Context Protocol servers built by Amazon. They let AI coding assistants like Claude Code or Cursor interact with AWS services directly -- reading S3 buckets, invoking Lambda functions, querying CloudWatch logs, managing CDK stacks, and calling Bedrock models. Each AWS service has its own MCP server module.

This is designed for developers and DevOps engineers who work in AWS-heavy environments and want their AI agents to query infrastructure, debug issues, or scaffold resources without switching to the AWS console.

§02

How it saves time or tokens

Manually navigating the AWS console to check logs, inspect S3 objects, or review CloudFormation stacks is time-consuming. With AWS MCP servers, the AI agent does it in-context: you describe the problem, the agent queries CloudWatch, reads the relevant logs, and suggests a fix. No context switching, no copy-pasting error messages.

§03

How to use

  1. Add the desired AWS MCP server to your editor's MCP configuration:
{
  "mcpServers": {
    "aws-s3": {
      "command": "uvx",
      "args": ["awslabs.s3-mcp-server@latest"],
      "env": {
        "AWS_PROFILE": "default",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}
  1. Ensure your AWS credentials are configured (via ~/.aws/credentials or environment variables).
  2. Restart your AI editor. The agent now has access to the configured AWS service.
  3. Ask the agent to perform tasks: 'List all S3 buckets', 'Show CloudWatch errors from the last hour', 'Deploy this CDK stack'.
§04

Example

Available MCP server modules:

ModuleServiceCapabilities
s3-mcp-serverS3List, read, write objects
cloudwatch-mcp-serverCloudWatchQuery logs, metrics
lambda-mcp-serverLambdaInvoke, list functions
cdk-mcp-serverCDKSynthesize, deploy stacks
bedrock-mcp-serverBedrockCall foundation models
§05

Related on TokRepo

§06

Common pitfalls

  • IAM permissions must be correctly scoped. The MCP server uses your AWS credentials, so the agent has whatever permissions your profile has. Use a dedicated IAM role with least-privilege for safety.
  • Each AWS service is a separate MCP server. Adding too many simultaneously can slow down editor startup. Only configure the services you actually need.
  • Region must be set correctly. If you omit AWS_REGION, the server defaults to your profile's region, which may not match where your resources live.

Frequently Asked Questions

Which AWS services are supported?+

The official collection includes MCP servers for S3, CloudWatch, Lambda, CDK, Bedrock, and several others. Amazon continues to add new services. Each service has its own MCP server module that you configure independently. Check the GitHub repository for the current list of available modules.

Is this officially maintained by Amazon?+

Yes. The AWS MCP servers are published under the awslabs GitHub organization and maintained by Amazon. They follow AWS SDK conventions for authentication and configuration. This is not a community fork -- it is Amazon's official MCP integration for their services.

How does authentication work?+

The MCP servers use your existing AWS credentials -- the same ~/.aws/credentials file or environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) that the AWS CLI uses. You can specify an AWS_PROFILE to select a particular set of credentials. SSO and IAM role assumption are also supported.

Can I use this with non-Claude AI editors?+

Yes. Any MCP-compatible editor can use these servers. The servers implement the standard Model Context Protocol and are not tied to any specific AI provider. Claude Code, Cursor, Windsurf, and other MCP clients can all connect to them.

Are there cost implications for using AWS MCP servers?+

The MCP servers themselves are free and open source. However, the AWS API calls they make are billed by AWS according to standard pricing. For example, reading S3 objects incurs S3 GET request charges, and invoking Bedrock models incurs inference charges. Monitor your AWS billing when using these servers actively.

Citations (3)
🙏

Source & Thanks

Created by AWS Labs. Licensed under Apache 2.0. awslabs/mcp — 8,600+ GitHub stars

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.