mreferre/standard-plugin-agent-toolkit-aws

How to use the AWS MCP Server effectively — the single authenticated endpoint that lets an agent run AWS CLI/API calls, execute sandboxed Python, search and read live AWS documentation, and retrieve skills. Use when configuring the AWS MCP Server, deciding between a scripted run and a direct call, paginating list operations, working across multiple regions or profiles, or writing IAM policies that scope what the agent may do (aws:ViaAWSMCPService and aws:CalledViaAWSMCP condition keys) with CloudWatch and CloudTrail visibility.

Decision guide for choosing the right AWS database service for a workload. Use when the user is unsure which database to use, is comparing options, or asks whether to use DynamoDB, Aurora, RDS, DocumentDB, ElastiCache, MemoryDB, Neptune, Keyspaces, or Timestream. Walks through access patterns, data model, consistency, scale, and cost tradeoffs across relational, key-value, document, wide-column, graph, time-series, and in-memory engines, and recommends a fit with rationale and Well-Architected considerations.

Create a production-ready, secure Amazon S3 bucket with versioning and a lifecycle policy. Use when the user asks to create an S3 bucket, enable versioning, add lifecycle rules, transition objects to Glacier or an archive tier, block public access, or encrypt a bucket. Delivers infrastructure-as-code (AWS CDK and CloudFormation) with secure defaults — Block Public Access, default encryption, a TLS-only bucket policy, versioning, and a lifecycle rule that transitions objects to Glacier after 90 days — following AWS Well-Architected best practices.

Build and deploy a serverless HTTP API on AWS using AWS Lambda behind Amazon API Gateway. Use when the user asks to create a REST or HTTP API, connect a Lambda function to API Gateway, deploy a serverless endpoint or backend, or scaffold a serverless application. Provides an infrastructure-as-code walkthrough (AWS SAM and AWS CDK) with least-privilege IAM, structured logging, sensible timeout and memory settings, and pay-per-request defaults, following AWS Well-Architected serverless best practices.

Baseline operating rules for any task that touches AWS. Use whenever the user asks to build, deploy, configure, inspect, or troubleshoot anything on AWS. Directs the agent to prefer the AWS MCP Server for AWS interactions, discover and load a relevant AWS skill before starting, verify uncertain details against live AWS documentation instead of guessing, prefer infrastructure-as-code (AWS CDK or CloudFormation) over one-off CLI mutations, and follow AWS Well-Architected best practices for security, cost, reliability, and operations.