Use the AWS MCP Server safely
Sets up safe, efficient use of the AWS MCP Server by confirming identity, account and region first, choosing the lightest tool for each question, and asking before any change to AWS resources.
Use it when
- You want the agent to look something up in your AWS account without touching anything
- You are not sure whether a question needs documentation, an account read or a script
- A request was refused with an access or region error and you need to know why
Tools it uses
aws___list_regionsaws___search_documentationaws___read_documentationaws___get_regional_availabilityaws___retrieve_skillaws___call_awsaws___run_scriptaws___get_presigned_urlaws___get_tasks
Check which of my EC2 instances in eu-west-1 are stopped, and tell me which account you are looking at first.
Using identity dev-readonly in account 111122223333, region eu-west-1. Of 14 instances listed (filtered to EC2 in that region), 3 are stopped: web-staging-2, batch-old-1 and bastion-test. I have not changed anything. Stopping or deleting any of them would need your explicit yes.