AWS MCP Servers - Complete Guide to Amazon Web Services MCP Integration

AWS MCP servers connect AI assistants to Amazon Web Services, enabling natural language control over your cloud infrastructure — S3, Lambda, DynamoDB, EC2, and more.

What Are AWS MCP Servers?

AWS MCP servers are Model Context Protocol integrations that connect AI assistants to Amazon Web Services. They enable Claude and Cursor to manage your cloud infrastructure through natural language.

Supported AWS Services:

Available AWS MCP Servers

Copy these ready-to-use configurations for your Claude Desktop or Cursor setup:

AWS MCP Server (Official) — Recommended

Comprehensive AWS integration supporting S3, Lambda, DynamoDB, and more:

{
  "mcpServers": {
    "aws": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-aws"],
      "env": {
        "AWS_ACCESS_KEY_ID": "your-access-key",
        "AWS_SECRET_ACCESS_KEY": "your-secret-key",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

AWS S3 MCP Server

Focused S3 integration for file storage operations:

{
  "mcpServers": {
    "s3": {
      "command": "npx",
      "args": ["-y", "mcp-server-s3"],
      "env": {
        "AWS_ACCESS_KEY_ID": "your-access-key",
        "AWS_SECRET_ACCESS_KEY": "your-secret-key",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

AWS Lambda MCP Server

Serverless function management and invocation:

{
  "mcpServers": {
    "lambda": {
      "command": "npx",
      "args": ["-y", "mcp-server-aws-lambda"],
      "env": {
        "AWS_ACCESS_KEY_ID": "your-access-key",
        "AWS_SECRET_ACCESS_KEY": "your-secret-key",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

AWS MCP Server Capabilities

Here's what you can do with AWS MCP servers:

Service	Operations
S3	List/create/delete buckets, upload/download files, generate presigned URLs, manage policies
Lambda	List/describe functions, invoke with payloads, view logs, update configuration
DynamoDB	Query/scan tables, put/get/delete items, create tables, batch operations
EC2	List instances, start/stop instances, describe security groups
CloudWatch	Query logs, get metrics, create alarms

Security Best Practices

• Use dedicated IAM users — Create IAM users with minimal permissions specifically for MCP
• Never hardcode credentials — Always use environment variables
• Enable MFA — Add multi-factor authentication for sensitive operations
• Enable CloudTrail — Log all API calls for auditing
• Rotate keys regularly — Rotate access keys every 90 days

Example: Minimal IAM Policy

Start with the minimum permissions needed. Here's an example for S3-only access:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:PutObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::your-bucket-name",
        "arn:aws:s3:::your-bucket-name/*"
      ]
    }
  ]
}

Use Cases

• DevOps Automation — Deploy and manage infrastructure with natural language
• Data Analysis — Query DynamoDB tables or analyze S3 data
• Log Investigation — Search CloudWatch logs to debug issues
• Cost Optimization — Analyze AWS spending and identify unused resources