Set up logging configuration based on server config.

Validate max results parameter.

A best effort check that makes sure that the format of a patch document is valid before sending it to CloudControl.

Validate that provider_type is a supported value. Args: ctx: MCP context for error reporting provider_type: The provider type to

Validate S3 URI format and return parsed bucket and key. Extracted from content_resolver._validate_s3_uri_format to be shared across modules.

Validate a URL for safe server-side fetching of OpenAPI specs. Performs DNS resolution and IP validation to prevent SSRF attacks. By default,

Create a mock RepositoryPolicyNotFoundException for testing.

Build a mock get_query_results response.

Reload module with FastMCP.tool patched to return the original function.

Run subprocess with consistent error handling. Args: cmd: Command to execute timeout: Timeout in seconds **kwargs: Additi

Clear the pricing cache. Useful for testing or when pricing data needs to be refreshed.

Close all connections and clear the map. Connection ``close()`` methods are coroutines (see ``AbstractDBConnection.close``). When ``c

Connect Playwright to a remote browser via CDP. Uses the bedrock-agentcore SDK to generate SigV4-signed WebSocket headers and the aut

Create test data by duration with specified pattern.

Derive the Transform API endpoint for a given region. If the ``AWS_TRANSFORM_API_ENDPOINT`` environment variable is set, it is used instead.

Handle errors during argument parsing.

Expand wildcard patterns for SLO targets with pagination support. Args: targets: List of target dictionaries next_token: Token fo

Extract requested sections from HTML. Args: html: Raw HTML content section_titles: List of section titles to extract Returns

Format validation result as human-readable string. Args: success_message: Message to show on success failure_prefix:

Get the AWS partition for the current session. The partition is cached after the first call to avoid repeated STS calls. Common parti

Get a logger adapter that logs to both MCP context and Loguru. Args: ctx: The MCP context object module_name: The module name for

Get start and end dates with defaults. Args: start_date: Optional start date in YYYY-MM-DD format end_date: Optional end date in

Retrieve security findings from AWS security services. This tool provides a consolidated interface to retrieve findings from various AWS security

Get detailed information about a specific Service Level Objective (SLO). **RECOMMENDED WORKFLOW AFTER USING THIS TOOL:** After getting SLO co

Get the value of the document.

Create or retrieve a cached Oracle database connection. Returns a 3-tuple: (db_connection, llm_response, replaced_connection). replaced_conne

Return True if FES is reachable via any auth method.

List recommendations from Cost Optimization Hub. Args: ctx: MCP context coh_client: Cost Optimization Hub client max_resu

Load prompt templates from a markdown file. Args: file_path: Path to the markdown file containing prompt templates Returns:

Look up CloudTrail events based on various criteria. This tool searches CloudTrail events using the LookupEvents API, which provides access t

Run the MCP server with CLI argument support.

Manage AWS Glue Data Catalog Encryption Settings for data protection. This tool allows you to retrieve and update AWS Glue Data Catalog Encry

Execute managed batch translation workflow with comprehensive monitoring. Workflow Steps: 1. Pre-validate language pairs and terminol

Parse timestamp string into datetime object. Args: timestamp_str: Timestamp in unix seconds or 'YYYY-MM-DD HH:MM:SS' format defau

Create or update an inline policy for an IAM user. This tool creates a new inline policy or updates an existing one for the specified user. I

Run a SQL query against MySQL. Args: sql: The sql statement to run ctx: MCP context for logging and state management conn

Run a SQL query against PostgreSQL. Args: sql: The sql statement to run ctx: MCP context for logging and state management

Read a sample of a specific file from a public dataset's S3 bucket. Downloads up to 100KB of raw bytes using anonymous access (no AWS account

Check if a principal in an IAM policy matches the target principal. Args: principal: Principal from IAM policy statement (can be string,

Create a mock TemplateNotFoundException for testing.

Extract ZIP bytes into a dictionary of {filename: text_content}. Args: data: The raw ZIP file bytes. Returns: Dictionary of

Get a new token from Cognito using username/password or client credentials. Returns: str: Cognito token or None if authentication

Return a patch for request_consent in scheduling tools.

Helper to build CDP AX tree nodes.

Standard response for tools that must bail when monitor platform is unknown. Web-schema queries against a mobile/OTel log group return zero rows,

Run an FT.AGGREGATE pipeline on a Valkey Search index. Translates structured JSON pipeline stages into FT.AGGREGATE syntax, eliminating the n

Find best matches using approximate resource matching. Uses a combination of fuzzy matching algorithms to find the best matches for a target reso

Build partition key for lookups

Build sort key for lookups

Build a user-agent suffix for boto3 Config. Args: primitive: The AgentCore primitive name (e.g. 'memory', 'runtime', 'browser

Validate CloudFormation template against cfn-guard rules using guardpycfn.

Create or retrieve a cached boto3 client with the appropriate profile and region. The client is configured with a custom user agent suffix 'a

Create and configure the FastMCP server. Args: config: Server configuration Returns: FastMCP: The configured FastMCP server

Application-level diagnostics through CloudWatch logs. Parameters ---------- cluster_name : str The name of the ECS Cluster

Generate entity code.

Gets all CloudWatch Alarms currently in ALARM state. This tool retrieves all CloudWatch Alarms that are currently in the ALARM state,

Gets the history for a CloudWatch alarm with time range suggestions for investigation. This tool retrieves the history for a specified CloudW

Get findings from a scan. Works during IN_PROGRESS (partial) or after COMPLETED.

User wants to get a model import job in Amazon Bedrock. This prompt handles requests to view details of a specific model import job.

Generates an SSH tunnel command to connect to an ElastiCache cluster through an EC2 jump host. Args: cache_cluster_id (str): ID of the El

Get the current status of an active workflow.

Grant HealthOmics access to an ECR repository. Updates the repository policy to allow the HealthOmics service principal (omics.amazonaws.com)

Handle general exceptions. Args: ctx: The MCP context e: The exception operation: The operation that was being performed

Create an Aurora PostgreSQL cluster with a single writer instance. Credentials are automatically managed by AWS Secrets Manager. Args:

Return the list of valid (host, port) connection endpoints for a cluster. A caller-supplied db_endpoint/port is considered legitimate only if it

List all AWS services being used in a specific region. Args: region: AWS region to list services for session: boto3 Session for A

Make a request to the Prometheus HTTP API with AWS SigV4 authentication. Args: prometheus_url: The base URL for the Prometheus AP

Map AWS service errors to custom exception types. Args: aws_error: The original AWS service error correlation_id: Optional correl

Create a mock for boto3.client that returns specified clients.

Parse tags from either a JSON string or a dict. MCP clients may send tags as a JSON string or as a native dict object. This function normaliz

Process nodegroup configuration in either shorthand or JSON format. Args: node_group_configuration: Nodegroup configuration in either for

Extract specific sections from AWS documentation pages by title. Retrieves a page, converts to markdown, and returns only matching sections.

Resolve a ref to a Playwright Locator. Args: page: Playwright Page to locate elements on. ref: Element ref from snaps

Set whether AWS resource creation/modification is enabled. When AWS resource write is disabled, certain operations like creating ECR repositories

Run a diff scan — analyzes only changed code with full repo context. Uploads the committed state at base_ref as the baseline source, and the

Return a copy of a boto3 response dict without the ResponseMetadata key. Identity APIs return resource fields alongside ResponseMetadata at the

Return True if all test steps passed. Skipped steps count as not-pass so that 'cluster creation failed' cascades into a non-zero exit

Validate that we have access to S3 buckets from the given paths. Args: bucket_paths: List of S3 bucket paths to validate Returns:

Validate a user-supplied directory path for write operations. Checks: - Path must be absolute. - Resolved path must not fall within a sen

Validate a user-supplied file path for read or write operations. Checks: - Path must be absolute. - Resolved path must not fall within a

Validate and process README input. Args: ctx: MCP context for error reporting readme: User-provided README input (markdown, file

Validate URLs based on allowed domains. Args: urls: Single URL string or list of URLs to validate allowed_domains: Optional list

Check if a pull-through cache repository is usable by HealthOmics. Evaluates whether the pull-through cache configuration allows HealthOmics

Convert datetime object to ISO format string if it's a datetime object.

Convert a HealthOmics read set to a GenomicsFile if it matches search criteria. Args: read_set: Read set dictionary from list_rea

Create a sample ECR repository response object.

Execute paginated searches across all configured storage systems in parallel. Args: request: Search request containing search par

Common pagination logic for fetching instrumented services. Args: unix_start: Start time as unix timestamp unix_end: End time as

Construct an OracledbPoolConnection with test defaults.

Build a mock discover_clusters returning a single cluster.

Extract the parsed JSON payload from an MCP result envelope.

Parse a container image reference into its components. Handles various formats: - ubuntu:latest -> registry-1.docker.io/library/ubuntu:latest

Preprocess entity config to extract template parameters and add GSI data.

Reload cost_anomaly_tools with FastMCP.tool patched to return the original function unchanged (identity decorator). This exposes a callable 'cost

Reload module with FastMCP.tool patched to return the original function.

Run a shell command on an instance via SSM and return the output. Sends the command via AWS-RunShellScript and polls for completion. Returns

Translate a boto3 ClientError into the {error, error_code, remediation} contract. The MCP server's pattern A (`{'error': '...'}`) returns are kep

Validate HTTP configuration for security.