Codibly AWS MCP Server

Enterprise MCP server by Codibly for comprehensive AWS cloud management - control EC2, S3, Lambda, CloudWatch, and more with AI assistance

View on GitHub Quick Start →

⚡ Quick Install with Claude Code MCP Guide

Connect Claude Code to any remote MCP server with one simple command. Choose between direct HTTP connections or a universal bridge - all configured automatically with our setup wizard.

Get the Claude Code MCP Setup Guide →

🔌 Test MCP Server Connection

Test your connection to the MCP wrapper server using your x-api-key. This validates that your MCP server credentials are configured correctly.

MCP Server API Key (x-api-key)

🚀 Test Full AWS Connection

Test both your MCP server connection AND your AWS credentials. This ensures your complete setup is working correctly.

MCP Server API Key (x-api-key)

AWS Access Key ID (x-aws-access-key-id)

AWS Secret Access Key (x-aws-secret-access-key)

AWS Default Region (x-aws-region)

📡 API Endpoint & Required Headers

POST https://aws.mcp.majewscy.tech

Required HTTP Headers:

Content-Type: application/json

x-api-key: Your MCP server API key

x-aws-access-key-id: Your AWS Access Key ID (required)

x-aws-secret-access-key: Your AWS Secret Access Key (required)

x-aws-region: AWS Region (optional, defaults to us-east-1)

🛠️ Available Tools

get_caller_identity

Get current AWS identity and account info

list_buckets

List all S3 buckets in your account

list_objects

List objects in an S3 bucket

describe_instances

Get EC2 instance details and status

start_instance

Start a stopped EC2 instance

stop_instance

Stop a running EC2 instance

invoke_lambda

Invoke a Lambda function

get_log_events

Get CloudWatch log events

⚠️ Common Errors & Solutions

401 Unauthorized

Invalid API credentials

Solution: Check your x-api-key and x-aws-access-key-id are correct

403 Forbidden

Insufficient permissions

Solution: Ensure your AWS IAM user has the required permissions

429 Rate Limited

Too many requests

Solution: Reduce request frequency or increase AWS service limits

Resource Not Found

Specified AWS resource does not exist

Solution: Verify the resource ID and region are correct

🔐 Required IAM Policy

To use this MCP server, your AWS IAM user needs the following policy attached. This policy provides comprehensive access to AWS services commonly used in development and operations.

⚠️ Security Note: This is a broad permissions policy. For production use, consider creating a more restrictive policy based on your specific needs.

MCPServerFullAccessPolicy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "VisualEditor0",
      "Effect": "Allow",
      "Action": [
        "s3:*",
        "ec2:*",
        "lambda:*",
        "logs:*",
        "cloudwatch:*",
        "cloudfront:*",
        "apigateway:*",
        "dynamodb:*",
        "events:*",
        "route53:*",
        "elasticloadbalancing:*",
        "ecr:*",
        "iam:ListPolicies",
        "iam:ListRoles",
        "iam:ListUsers",
        "iam:GetRole",
        "iam:GetPolicy",
        "iam:GetUser",
        "bedrock:InvokeModel",
        "bedrock:InvokeModelWithResponseStream"
      ],
      "Resource": "*"
    },
    {
      "Sid": "VisualEditor1",
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:ListBucket",
        "s3:DeleteObject"
      ],
      "Resource": [
        "arn:aws:s3:::your-mcp-bucket",
        "arn:aws:s3:::your-mcp-bucket/*"
      ]
    },
    {
      "Sid": "VisualEditor2",
      "Effect": "Allow",
      "Action": [
        "ssm:GetParametersByPath",
        "ssm:GetParameters",
        "ssm:GetParameter"
      ],
      "Resource": "arn:aws:ssm:*:*:parameter/your-mcp-*"
    },
    {
      "Sid": "VisualEditor3",
      "Effect": "Allow",
      "Action": "dynamodb:*",
      "Resource": "arn:aws:dynamodb:*:*:table/YourMCP*"
    }
  ]
}

How to Apply This Policy:

Go to AWS IAM Console → Policies
Click "Create Policy"
Select "JSON" tab and paste the policy above
Name it "MCPServerFullAccessPolicy"
Attach it to your IAM user or role

🏥 Service Health Check

Checking...

Response Time

Server Status

Protocol Version

2024-11-05

Last Checked

Configuration

// Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS)
// Windows: %APPDATA%\Claude\claude_desktop_config.json
{
  "mcpServers": {
    "aws": {
      "command": "npx",
      "args": [
        "-y",
        "@aws-mcp/aws-mcp@latest"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "YOUR_AWS_ACCESS_KEY_ID",
        "AWS_SECRET_ACCESS_KEY": "YOUR_AWS_SECRET_ACCESS_KEY",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

// HTTP Wrapper Configuration (for remote access)
{
  "aws": {
    "type": "http",
    "url": "https://aws.mcp.majewscy.tech",
    "headers": {
      "x-api-key": "YOUR_MCP_API_KEY",
      "x-aws-access-key-id": "YOUR_AWS_ACCESS_KEY_ID",
      "x-aws-secret-access-key": "YOUR_AWS_SECRET_ACCESS_KEY"
    }
  }
}

// Claude Code: .mcp.json in your project root (for HTTP wrapper)
{
  "aws": {
    "type": "http",
    "url": "https://aws.mcp.majewscy.tech",
    "headers": {
      "x-api-key": "YOUR_MCP_API_KEY",
      "x-aws-access-key-id": "YOUR_AWS_ACCESS_KEY_ID",
      "x-aws-secret-access-key": "YOUR_AWS_SECRET_ACCESS_KEY"
    }
  }
}

Features

Complete AWS cloud infrastructure management for AI assistants

🖥️

EC2 Management

Start, stop, and monitor EC2 instances across regions.

🪣

S3 Operations

Manage buckets and objects with full S3 capabilities.

⚡

Lambda Functions

Invoke and manage serverless Lambda functions.

📊

CloudWatch Logs

Access and analyze CloudWatch logs and metrics.

🔐

IAM & Security

Manage roles and permissions with IAM integration.

🌍

Multi-Region Support

Work across all AWS regions seamlessly.

📋 Recent Updates from GitHub

Latest Aug 25, 2025

Fix: Update scripts format for aws-api-mcp-server
Fix: Resolve Windows cp1252 encoding issue

Recent Aug 25, 2025

Chore: Bump packages for release/2025.08.20250825171959
Feature: Add CloudTrail MCP server