Generates an SSH tunnel command to connect to an ElastiCache cluster through an EC2 jump host. Args: cache_cluster_id (str): ID of the El

Get the current status of an active workflow.

Grant HealthOmics access to an ECR repository. Updates the repository policy to allow the HealthOmics service principal (omics.amazonaws.com)

Handle general exceptions. Args: ctx: The MCP context e: The exception operation: The operation that was being performed

Create an Aurora PostgreSQL cluster with a single writer instance. Credentials are automatically managed by AWS Secrets Manager. Args:

Return the list of valid (host, port) connection endpoints for a cluster. A caller-supplied db_endpoint/port is considered legitimate only if it

List all AWS services being used in a specific region. Args: region: AWS region to list services for session: boto3 Session for A

Make a request to the Prometheus HTTP API with AWS SigV4 authentication. Args: prometheus_url: The base URL for the Prometheus AP

Map AWS service errors to custom exception types. Args: aws_error: The original AWS service error correlation_id: Optional correl

Create a mock for boto3.client that returns specified clients.

Parse tags from either a JSON string or a dict. MCP clients may send tags as a JSON string or as a native dict object. This function normaliz

Process nodegroup configuration in either shorthand or JSON format. Args: node_group_configuration: Nodegroup configuration in either for

Extract specific sections from AWS documentation pages by title. Retrieves a page, converts to markdown, and returns only matching sections.

Resolve a ref to a Playwright Locator. Args: page: Playwright Page to locate elements on. ref: Element ref from snaps

Run a SQL query against PostgreSQL. Args: sql: The sql statement to run ctx: MCP context for logging and state management

Set whether AWS resource creation/modification is enabled. When AWS resource write is disabled, certain operations like creating ECR repositories

Return a copy of a boto3 response dict without the ResponseMetadata key. Identity APIs return resource fields alongside ResponseMetadata at the

Validate that we have access to S3 buckets from the given paths. Args: bucket_paths: List of S3 bucket paths to validate Returns:

Validate a user-supplied directory path for write operations. Checks: - Path must be absolute. - Resolved path must not fall within a sen

Validate a user-supplied file path for read or write operations. Checks: - Path must be absolute. - Resolved path must not fall within a

Validate and process README input. Args: ctx: MCP context for error reporting readme: User-provided README input (markdown, file

Validate URLs based on allowed domains. Args: urls: Single URL string or list of URLs to validate allowed_domains: Optional list

Check if a pull-through cache repository is usable by HealthOmics. Evaluates whether the pull-through cache configuration allows HealthOmics

Convert datetime object to ISO format string if it's a datetime object.

Convert a HealthOmics read set to a GenomicsFile if it matches search criteria. Args: read_set: Read set dictionary from list_rea

Create a sample ECR repository response object.

Execute paginated searches across all configured storage systems in parallel. Args: request: Search request containing search par

Common pagination logic for fetching instrumented services. Args: unix_start: Start time as unix timestamp unix_end: End time as

Construct an OracledbPoolConnection with test defaults.

Build a mock discover_clusters returning a single cluster.

Extract the parsed JSON payload from an MCP result envelope.

Parse a container image reference into its components. Handles various formats: - ubuntu:latest -> registry-1.docker.io/library/ubuntu:latest

Preprocess entity config to extract template parameters and add GSI data.

Reload cost_anomaly_tools with FastMCP.tool patched to return the original function unchanged (identity decorator). This exposes a callable 'cost

Reload module with FastMCP.tool patched to return the original function.

Run a shell command on an instance via SSM and return the output. Sends the command via AWS-RunShellScript and polls for completion. Returns

Translate a boto3 ClientError into the {error, error_code, remediation} contract. The MCP server's pattern A (`{'error': '...'}`) returns are kep

Validate HTTP configuration for security.

PRIMARY SLO AUDIT TOOL - The #1 tool for comprehensive SLO compliance monitoring and breach analysis. **PREFERRED TOOL FOR SLO ROOT CAUSE ANALYSI

Check if command matches a customization and return the highest priority decision. Returns None if no customization matches.

Convert a large API response to a SQLite table. This function stores API response data in a SQLite table for easier querying with the session

Retrieve available AWS services. Args: service_code_list: List of service codes to retrieve (optional) language: The

Discover all Redshift clusters and serverless workgroups. Discovery is best-effort for each type: if either provisioned or serverless discove

Download content from a pre-signed S3 URL. If *save_path* is provided the raw bytes are written to disk and the function returns ``{"savedTo"

Return an empty result set.

Execute a test query.

Extracts the scalar or array value from a single cell.

r"""Format the prompt template with validation parameters. Args: rubric_items: Formatted rubric criteria (e.g., "1. Criterion 1\n

Formats a single workload estimate object from the get_workload_estimate API response. Args: estimate: Single workload estimate object fr

Get authentication headers.

Get the billing preferences for one feature. Args: ctx: The MCP context object. features: The feature to retrieve (required). The

Retrieve the broker hostname from Amazon MQ DescribeBroker API using the broker ID.

Get all connection keys as JSON string. Includes ``effective_is_over_privileged`` per connection for diagnostics: True/False once the

Check if BCM Pricing Calculator preferences are properly configured. Args: ctx: The MCP context object Returns: dict: Contai

Helper function to extract data from CallToolResult response.

Retrieve RDS cluster properties from AWS. Args: cluster_identifier: RDS cluster identifier region: AWS region (e.g., 'us-east-1')

Resolve a caller-supplied host to a valid (host, port) cluster endpoint. Compares requested_host against the cluster's AWS-advertised endpoints a

Check if custom tags are enabled. When CUSTOM_TAGS environment variable is set to 'True', the system will ignore adding new tags or v

List translation jobs with filtering capabilities. Args: status_filter: Filter jobs by status (SUBMITTED, IN_PROGRESS, COMPLETED,

Lists all workload estimates for the account. Args: ctx: The MCP context object created_after: Filter estimates created after thi

Load config from disk.

Parse CLI arguments and run the e2e integration test.

Build a mock invoke_code_interpreter EventStream response. Mirrors the real API shape: { "stream": [ { "result": { "content": [...], "structu

Manage AWS Glue crawler schedules and monitor performance metrics. This tool provides operations for controlling crawler schedules and retrie

Add, update, or remove a workspace collaborator. Actions: - put: add a user OR change their role (upsert). Requires userId and role.

Parse and validate auditors parameter.

Show the S3 bucket structure for a public dataset (no AWS account required). Returns up to 10 objects from the dataset's S3 bucket (in S3's defau

Map a CloudControl API response to a standard output format for the MCP.

Check if the server is running in readonly mode. Returns: True if readonly mode is enabled, False otherwise

Decorator to register a function as a resource provider. The decorated function should return the resource content as a string.

Set a database connection in the map.

Package code, upload to S3, and start a security scan. Reuses an existing CodeReview for the same workspace path if one exists. Only

Validates application name to ensure it complies with AWS ECS/ECR naming requirements. Requirements: - Length: 1-20 characters (to accom

Validate that exactly one definition source is provided and process it. Accepts a ``definition_source`` parameter that can be a local ZIP file pa

Validate RabbitMQ queue/exchange names.

Convenience function to validate a schema file. Args: schema_path: Path to schema.json file strict_mode: If True, treats warnings

Validate SQL query for security issues. Args: query: SQL query to validate Returns: bool: True if the query is valid Ra

Validate a SQL Server table name reference.

Execute a destructive Valkey command. Admin tier — disabled by default. Requires both: 1. Server config: VALKEY_ADMIN_ENABLED=true 2. con

Initialize the timeout error. Args: message: Error message timeout_seconds: Timeout duration in seconds e

Build a single ``--flag=value`` argv token (unambiguous for argparse).

Build a single ``--flag=value`` argv token (unambiguous for argparse).

Create a mock ECR client configured for HealthOmics access.

Internal implementation of get_eks_insights.

Convert FieldInfo objects to None, otherwise return the value as-is.

Create a mock RDS client returning test cluster properties.

Extract the parsed JSON payload from an MCP result envelope.

Parse a possibly-qualified SQL Server table name into its identifier parts. Supports both double-quoted ("name") and bracket-quoted ([name]) iden

Reload cost_optimization_hub_tools with FastMCP.tool patched to return the original function unchanged (identity decorator). This exposes a calla

Run a synchronous function in an executor. Args: func: The function to run *args: Positional arguments to pass to the

Build a minimal ASGI HTTP scope carrying the given headers.

Score 1.0 if version matches, 0.5 for wildcard '*', 0.0 otherwise. Supports suffix '+' for version-or-later matching (e.g. 'syn-nodej

Configure mock connection manager to return the mock browser.

Minimal validation - only catch obvious errors.

Close the open session and underlying transport, if any. Idempotent.