Translate a pipeline stage dict into a GLIDE FtAggregateClause.

Check if a role can be assumed by a specific service. Args: assume_role_policy_document: Assume role policy document

Check that content size does not exceed the configured maximum. Args: size: The actual content size in bytes. max_size_bytes: The

Compare generated files with expected snapshots.

Compute trend using OLS on trend component values.

Execute a CloudWatch Logs Insights query and poll for results.

Extract EC2 instance IDs from a component detail response. Checks multiple paths in order: 1. Hosts[].EC2InstanceId / InstanceId (standard fo

Format custom line item objects from the AWS API response.

Create a CloudTrail client for the specified region.

Internal implementation of get_eks_vpc_config.

Get the real storage_lens_run_query via identity decorator reload.

Get task definitions by family prefix. Parameters ---------- family_prefix : str Prefix to filter task definition families.

Get or create Amazon Translate client.

Check if a service should be registered based on env vars.

Build a mock logs client that returns *results* on get_query_results.

Normalize IAM policy actions to a set of lowercase strings. Args: actions: Actions from IAM policy (can be string, list, or None) Re

Build an optional filter clause.

Parse a possibly-qualified Oracle table name into its identifier parts. Oracle uses double-quote delimited identifiers (standard ANSI SQL). R

Parse manifest logs to extract key metrics for analysis. Args: run_id: The run ID being analyzed run_response: Response from get_

Process a key template (PK or SK) and return metadata. Args: template: Template string, list of templates, or None fi

Read the response body from an invoke_agent_runtime response. Handles three boto3 response shapes: - StreamingBody (has .read()) - EventS

Validate GSI projection configurations. Args: gsi_list_data: Raw GSI list data from schema gsi_list_path: Path contex

Resolve and confine output_file within the permitted output directory. The base directory defaults to the current working directory and can be

Validate S3 access for input and output locations. Args: input_config: Input configuration to validate output_config:

Add default tags to resource properties if DEFAULT_TAGS is enabled and resource supports tagging.

Run an aggregation pipeline against a DocumentDB collection. This tool executes a DocumentDB aggregation pipeline on a specified collection.

Run the consolidated status assessment. The caller is responsible for: * Parsing ISO inputs into ``datetime`` objects (string parsing is an

Core business logic for BCM Pricing Calculator. Args: ctx: The MCP context object operation: The operation to perform ide

Click an element identified by its accessibility ref. Use refs from the most recent browser_snapshot or navigation result. If the ref

Execute a JavaScript expression in the page context. The expression is evaluated in the browser and its return value is serialized to

Wait for text to appear or an element to become visible. Provide either text or selector. Returns the page snapshot after the conditi

Build a ConnectionConfig for cookie-based authentication. Args: origin: The origin URL (trailing slash is stripped). session_cook

Build a dynamic JSON Schema from the agent artifact. For components whose output fields are defined at runtime (AutoForm, DynamicHITLRenderEngine

Calculate the actual start time and end time for a time window. Parameters ---------- time_window : int, optional Time windo

Check Application and Network Load Balancers for data-in-transit security best practices.

Check if Amazon Inspector is enabled in the specified region. Args: region: AWS region to check session: boto3 Session for AWS AP

Check if all resource ARNs in IAM policies are correct.

Close all connections and clear the map.

Mock implementation of cost_explorer for testing.

Create a new AgentCore Runtime to host an agent or tool. This is a one-time setup operation that creates AWS infrastructure (IAM role

Execute create_api_cache operation.

Create a new CodeConnection. This function creates a new AWS CodeConnection for connecting to a third-party Git provider. The connection will

Create a container registry map for HealthOmics workflows. Creates a container registry map file that can be used when creating HealthOmics w

Create a new IAM role for data processing services. This tool creates a new IAM role with the appropriate trust relationship for the specifie

Create an embeddings provider based on environment configuration. This list of providers can be extended in the future to support additional

Create an AWS Pricing API client. Args: profile: AWS profile name to use (default: None, uses AWS_PROFILE or default profile) reg

Create an Amazon ElastiCache replication group. This tool creates a new replication group with specified configuration including: - Basic rep

Create an AWS resource implementation.

Generic delete operation

Delete a terminology. Args: name: Terminology name Returns: True if deletion was successful Raises:

Returns a list of the available cache engines and their versions. Parameters: engine (Optional[str]): The cache engine to return. Valid v

Returns events related to clusters, cache security groups, and parameter groups. Parameters: source_type (Optional[str]): The event sourc

Describe CloudWatch Logs log groups. Args: account_identifiers: List of account IDs to filter log groups log_group_name_prefix: P

Detect AWS Network Firewalls and 3rd party firewalls attached to a Transit Gateway. Use this tool when: - Analyzing network security architec

Get policy decision for a service/operation combination. Priority: deny > elicit > default behavior

Disconnect Playwright from a browser session. Args: session_id: AgentCore browser session identifier.

Discover VPC IDs associated with ECS clusters.

Validates and tests DynamoDB data models against DynamoDB Local. Use this tool to validate, test, and verify your DynamoDB data model after compl

Enable diagnostics tracking.

Ensure an S3 URI begins with s3:// and ends with a slash. Args: uri: S3 URI Returns: str: S3 URI with trailing slash Ra

Handle error messages for DummyContext.

Do nothing. Args: message: The error message

Execute a SQL query against the database. Args: ctx: MCP context for error handling conn_to_use: Database connection to use, or N

Execute SQL query on the session database. Optionally adds user data to the database before querying. Args: ctx: MCP context

Extract a typed value from an RDS Data API cell dict.

Extract and convert HTML content to Markdown format. Args: html: Raw HTML content to process Returns: Simplified markdown ve

Helper function to extract structured data from MCP result.

Extract disk and memory usage metrics from canary log group.

Extract the AWS region from a Transform application URL. Handles the ``https://{id}.transform.{region}.on.aws`` pattern. Args: origi

Filter and rename access patterns that conflict with CRUD method names. Filtering rules: - Patterns with same name AND same signature as CRUD

Extract essential fields from a GetJob response or a ListJobEntry.

Convert seconds to closest seasonality enum.

Generate Kubernetes manifest for a deployment and service. This tool generates Kubernetes manifests for deploying an application to an EKS cl

Generate a Gantt-style timeline visualization for an AWS HealthOmics workflow run. This tool creates an SVG Gantt chart showing task execution ph

Generic get operation with optional consistent read

Get all Transit Gateway route tables and their routes in one call. Use this tool when: - You need a complete view of all routing in a Transit

Get cost forecast. Args: ctx: MCP context ce_client: AWS Cost Explorer client metric: Cost metric to forecast sta

Return per-operation RED metric summaries for a service from Application Signals. Each summary mirrors the service_events ``get_endpoints`` shape

Lazily initialize the Neptune graph connection. This function ensures the graph is only initialized when needed, not at import time, which he

Get a health overview of the system. **PRIMARY ENTRY POINT for general health, performance, AND error-pattern questions.** Use this FIRST for

Gets recommended alarms for a CloudWatch metric. This tool retrieves alarm recommendations for a specific CloudWatch metric identifie

Get the AWS region from environment variable or default. Returns: str: AWS region name

Get a comprehensive reference guide for AgentCore Runtime. Covers CLI commands, agentcore.json schema, protocol contracts, session li

Get a realistic sample value for a field based on the usage data. Lookup hierarchy: 1. Entity-specific sample_data or access_pattern_

Retrieves Savings Plans utilization data. Args: ctx: The MCP context ce_client: Cost Explorer client start_date: Start da

Retrieves detailed Savings Plans utilization data. Args: ctx: The MCP context ce_client: Cost Explorer client start_date:

Configure authentication and for FastMCP server.

Returns example SAM templates from the Serverless Land GitHub repo. Use this tool to get examples for building serverless applications with A

Generates an SSH tunnel command to connect to an ElastiCache replication group through an EC2 jump host. Args: replication_group_id (str)

Get usage forecast. Args: ctx: MCP context ce_client: AWS Cost Explorer client metric: Usage metric to forecast s

Return True if GSI has multiple partition key attributes.

Initialize the Oracle connection pool.

Delete an existing Amazon RDS (Aurora) cluster. Args: region: AWS region where the cluster is located cluster_id: The DB cluster

Interpret the given CLI command and return an interpretation response.

Tool that invokes an AWS Lambda function with a JSON payload.

Check if the authentication provider is properly configured.

Check if SQL is a read-only query. This method determines if a query is safe to execute in read-only mode. It uses a whitelist approa