Practical Notes
- Quant: the README claims 300+ AWS services reachable through a single MCP endpoint.
- Quant: status badge says GA and the getting-started snippet includes
AWS_REGION=us-west-2metadata.
Main
A least-privilege rollout:
- Start with
aws-coreand restrict to read-only actions until you trust the workflow. - Require explicit approvals for mutating actions (deploy, IAM, billing).
- Treat skills as playbooks: let the agent discover the right skill, then follow it step-by-step.
When something feels vague, force the agent to answer: which service, which region, which resource ARN, and which rollback plan?
FAQ
Q: Do I need AWS credentials? A: Yes for real API calls; docs search and skill discovery can work without auth.
Q: Which plugin should I install first?
A: aws-core is described as the starting point in the README.
Q: Is this only for Claude Code? A: No—plugins exist for Claude Code/Codex, and skills/MCP config work for other agents too.