Append AWS Backup status for SAP HANA resources. Includes actual failure reasons from the AWS Backup API (StatusMessage) for any FAILED, EXPI

Check health of a single SAP application. Returns: Tuple of (markdown_report, app_status, discovery_status)

Convert OTel trace ID to X-Ray format. OTel format: "0xdeadbeefdeadbeefdeadbeefdeadbeef" (0x + 32 hex) X-Ray format: "1-deadbeef-deadbeefdead

Create a Billing Conductor client with the default region. Returns: boto3.client: AWS Billing Conductor client.

Create a mock RegistryPolicyNotFoundException for testing.

Decode a v2 opaque pagination token. Returns a dict ``{'page': str, 'count': int}`` on success, or ``None`` if the token isn't in v2 format (

Internal utility function to determine computation model configuration type with smart optimization. This function handles the complete logic for

Execute searches across all configured storage systems in parallel. Args: request: Search request containing search parameters

Helper function to filter operation targets and detect wildcards. Args: provided: List of target dictionaries Returns: tuple

Format any value for display.

Generate actionable suggestions based on error data. Args: error_data: Parsed error data from S3 details file Returns:

Extract all top-level SQL operations from the query as a set.

Check if a repository has a pull-through cache rule configured. Queries ECR to check if any pull-through cache rule's prefix matches the repo

Build a standard ClientError response dict for tests.

Create a mock HealthOmics client.

Fetch a spec body, connecting ONLY to the IPs validation already pinned. This mirrors fastmcp's ``ssrf_safe_fetch`` but consumes the resolved IPs

Proxy a request to the remote knowledge MCP server. Args: method: The MCP tool method name to call params: Parameters to pass to

Score 0.0-1.0 based on error_pattern matches (regex, text_contains, error_type). OR-semantics: any single pattern matching any single error m

Build a minimal, otherwise-valid spec whose schema carries a single $ref.

Validate that template array lengths match GSI key array lengths. When both the GSI key (partition_key/sort_key) and the mapping template

Validate multi-attribute key (partition_key or sort_key). Args: key_value: String, list of strings, or None key_name:

Validate required parameters for the given action.

Validate terminology name.

Validate that tokens are from the same workflow chain.

Acquire a mock connection.

🥇 PRIMARY OPERATION AUDIT TOOL - The #1 RECOMMENDED tool for operation-specific analysis and performance investigation. **⭐ USE THIS AS THE PRIMA

Apply AWS SigV4 authentication to the request.

Select an option from a dropdown or combobox. Provide one of: value (option value attribute), label (visible text), or index (zero-ba

Build final SVG string. Returns: Complete SVG document as string

Check if a command matches any entry in an allowlist (word-boundary aware). Handles single-word (GET), multi-word (MEMORY USAGE), and dotted (JSO

Check Synthetics canaries associated with audited services via list_service_dependents.

Check storage configuration requirements for bulk import jobs. For bulk import jobs with adaptive_ingestion=False, either: 1. Multi-layer sto

Check AWS storage resources for encryption and security best practices. Args: region: AWS region to check services: List of stora

Clean up all existing tables in DynamoDB Local from previous DynamoDB data model validation. This function removes all tables that were created d

Configure the workspace for the current request. If a URL is provided via environment variable, it will be used directly. If a workspace ID i

Convert a large API response to a SQLite table. This function stores API response data in a SQLite table for easier querying with the session

Helper function to create mock IR objects for testing.

Execute create_resolver operation.

Create a CloudFormation template from existing resources using the IaC Generator API. This function handles three main scenarios: 1. Starting

Create a formatted timestamp range from start and end timestamps. This tool formats a range of timestamps for display, useful for showing tra

Generic delete operation

Provides instructions on how to deploy a serverless application to AWS Lambda. Deploying a Lambda application requires generating IaC templat

Lists AWS CloudWatch log groups and saved queries associated with them, optionally filtering by a name prefix. This tool retrieves informatio

Validates a schema.json file - the structured JSON representation of your DynamoDB data model. This tool validates that your schema.json file is

Mock error method.

Helper function to extract structured data from MCP result.

Service-level diagnostics for ECS services. Parameters ---------- cluster_name : str The name of the ECS Cluster service

Format documentation result with pagination information. Args: url: Documentation URL content: Content to format start_in

Generate recommendations based on the scan results.

Get an authentication provider based on configuration. Args: config: The application configuration Returns: AuthProviderProt

Get a cached BrowserClient for the specified region. Uses the bedrock-agentcore SDK to manage boto3 clients, endpoint resolution, and user-ag

Extract and analyze canary code from Lambda layers.

Get logs from CloudWatch for a specific resource. This tool retrieves logs from CloudWatch for Kubernetes resources in an EKS cluster,

Get additional data from Compute Optimizer for compute resource recommendations.

Get current correlation ID from context or generate a new one. Returns: Correlation ID string

Get a report of all diagnostics data.

Initial entry point that analyzes ECS deployment state and collects troubleshooting information. Parameters ---------- cluster_name

DEPENDENCY MAPPING TOOL - Analyze dependencies within and across groups. Use this tool when users ask: - "What are the dependencies of the Pa

User wants to get an imported model in Amazon Bedrock. This prompt handles requests to view details of a specific imported model. It

Get the HealthOmics service endpoint URL from environment variable. Returns: str | None: HealthOmics endpoint URL if valid, None otherwis

Retrieve all possible values for specific attributes of an AWS service. Args: service_code: The service code to query (e.g., 'AmazonEC2',

Get pricing information from AWS Price List API. Args: ctx: MCP context service_code: AWS service code filters: Optional

Get detailed information about a specific recommendation. Args: ctx: MCP context coh_client: Cost Optimization Hub client

Retrieve Transit Gateway flow logs from CloudWatch Logs for traffic analysis and troubleshooting. Use this tool when: - Investigating connect

Check if any usage data was successfully loaded.

Initialize guard rules and cache remediation mappings on server startup. Loads the package's bundled security rules. Custom rules are not support

Invoke an agent hosted in AgentCore Runtime. Sends a request to the agent and returns the response. Each invocation uses or creates a

Load configuration from arguments and environment variables. Args: args: Command line arguments Returns: Config: Configurati

Load JSON file with simple error handling (raises exceptions). Args: file_path: Path to JSON file file_name: Name for

Access connection metadata and preview entity data from AWS Glue connections. This tool provides operations for discovering entities availabl

Parse an AWS ARN string into structured components. Examples: - Task Definition: arn:aws:ecs:us-west-2:123456789012:task-definition/

Process log delivery configurations in either shorthand or JSON format. Args: log_delivery_configurations: Log delivery configurations in

Find smallest instance type that fits observed usage plus headroom. The algorithm applies headroom to the observed usage, then finds the

Resolve InfluxDB configuration from parameters or environment variables. Args: url: The URL of the InfluxDB server (optional, falls back

Run Checkov security and compliance scanner on server-stored CloudFormation template implementation.

Start a FHIR export job. Transforms the snake_case ``output_data_config`` into the PascalCase shape expected by boto3 (``OutputDataCo

Update an existing entity with optimistic locking (prevents lost updates) Note: Uses PutItem with exclude_none=True to support sparse GSIs. T

Validate asset model ID format - accepts UUID or external ID format.

Validate that a value is in a list of valid enum values. Args: value: The value to validate valid_values: List of valid enum valu

Validate that all required fields are present in data.

Validate an Oracle table name reference.

Verify if an EMR cluster is managed by the MCP server and has the expected resource type. This method checks if the EMR cluster has the MCP m

Append HANA log backup status to the report. Uses SSM command history to check for AWSSystemsManagerSAP-HanaLogBackupStatusCheck results. Fal

Case-insensitive dictionary getter.

Recursively convert datetime objects to ISO strings in nested data structures.

Transform structured parameter format to oracledb named parameter dict.

Create a mock response for describe_pull_through_cache_rules with given prefixes.

Describe a CloudFormation stack.

Download schema for a specific resource type. Args: resource_type: The AWS resource type (e.g., "AWS::S3::Bucket") re

Execute AWS CLI DynamoDB commands (internal use only). Args: command: AWS CLI command string (must start with 'aws dynamodb') end

Extract a focused summary from an X-Ray segment/subsegment document. Recursively processes subsegments up to depth 5 to avoid excessive nesting.

Format cost as $X.XX.

Get AWS authentication for HTTP requests. If ``expected_host`` is provided, the returned auth will refuse to sign requests whose host

Async context manager that yields an exclusive pymssql connection from pool.

Helper function to retrieve logs from a specific CloudWatch log stream. Args: client: CloudWatch Logs client log_group_name: Name