groovyBugify/aws-security-mcp

Inspect AWS security services and the resources they see

装之前：没有可直接复制的命令 · 许可证未标注 · 链接可访问

第一步：git clone https://github.com/groovyBugify/aws-security-mcp.git

在 GitHub 查看 ↗链接已于 2026-11-12 核查 · HTTP 200 · 打开的是厂商自己的官网

安装与配置

客户端配置（取自该仓库的安装命令）

{
  "mcpServers": {
    "groovybugify-aws-security-mcp": {
      "command": "uv",
      "args": ["tool", "install", "mcp-proxy"]
    }
  }
}

解析自我们于 2026-11-04 抓取的该仓库 README；我们未执行过。

command/args 来自仓库写明的安装命令；不确定时请以该项目 README 为准。

VS Code（.vscode/mcp.json —— 键名是 servers）

{
  "servers": {
    "groovybugify-aws-security-mcp": {
      "command": "uv",
      "args": ["tool", "install", "mcp-proxy"]
    }
  }
}

VS Code 顶层键是 <code>servers</code>，其余与上面那份相同。

Claude Code（命令行）

claude mcp add --transport stdio groovybugify-aws-security-mcp -- uv tool install mcp-proxy

Claude Code 不收 JSON 文件，用这条命令直接加。

配置项的键名以你的客户端为准：客户端与 CLI

来源明细: 收录自 abordage/awesome-mcp 榜单（我们从中收集的条目之一） · 条目类型：MCP 服务
收录与活跃: 收录于 2026-11-05 · 最近见到 2026-11-14 · 共见到 10 次 · 被 10 个来源列出
评分构成: 综合分 1,003 · 10 个来源 · mcp
安装: uv tool install mcp-proxy

常见问题（答案都来自我们的记录）

怎么安装？

该仓库给出的安装命令是 uv tool install mcp-proxy。我们的记录里它是仓库自己提供的；不保证在你的客户端上直接可用。

它适合谁 / 用来做什么？

我们把它归在这些标签下: MCP 服务。标签来自条目自身，不是我们强加的分类。

谁维护它、还在更新吗？

我们收录于 2026-11-05；最近见到 2026-11-14。这里没有"官方认证"或"质量评级"——我们只记录来源与时间。

# AWS Security MCP

以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →

A Model Context Protocol (MCP) server that enables AI assistants to perform comprehensive AWS security analysis through natural language queries.
## Overview
AWS Security MCP bridges AI assistants like Claude with AWS security services, enabling real-time infrastructure analysis through conversational queries. The system automatically discovers and analyzes resources across multiple AWS accounts, providing security insights without requiring deep AWS CLI knowledge.
### Key Capabilities
Cross-Account Discovery: Automatic detection and access to AWS Organization accounts
Natural Language Interface: Query AWS resources using plain English
Security Analysis: Integrated findings from GuardDuty, SecurityHub, and Access Analyzer
Infrastructure Mapping: Network topology, threat modelling, security review and blast radius analysis
Log Analytics: Athena-powered analysis of CloudTrail, VPC Flow Logs, and security events
## Prerequisites
Python: 3.11 or higher
Package Manager: uv
AWS Account: With appropriate IAM permissions
MCP Client: Claude Desktop, Cline, or compatible client
### AWS Requirements
MCP Server's AWS credentials must have the following permissions:
#### Core MCP Permissions
json
"Version": "2012-10-17",
"Statement": [
"Sid": "CrossAccountAccess",
"Effect": "Allow",
"Action": [
"sts:AssumeRole"
],
"Resource": "arn:aws:iam:::role/aws-security-mcp-cross-account-access"
},
"Sid": "OrganizationDiscovery",
"Effect": "Allow",
"Action": [
"organizations:ListAccounts"
],
"Resource": ""
#### Athena Integration Permissions
For advanced log analysis capabilities, additional permissions are required:
json
"Version": "2012-10-17",
"Statement": [
"Sid": "AthenaQueryExecution",
"Effect": "Allow",
"Action": [
"athena:BatchGetQueryExecution",
"athena:GetQueryExecution",
"athena:GetQueryResults",
"athena:GetWorkGroup",
"athena:GetTableMetadata",
"athena:ListQueryExecutions",
"athena:StartQueryExecution",
"athena:GetQueryResultsStream",
"athena:GetDataCatalog",
"athena:ListDataCatalogs",
"athena:ListDatabases",
"athena:ListTableMetadata"
],
"Resource": ""
},
"Sid": "GlueCatalogAccess",
"Effect": "Allow",
"Action": [
"glue:GetDatabase",
"glue:GetDatabases",
"glue:GetTable",
"glue:GetTables",
"glue:GetPartition",
"glue:GetPartitions",
"glue:BatchGetPartition"
],
"Resource": ""
},
"Sid": "S3LogDataAccess",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::your-cloudtrail-bucket/",
"arn:aws:s3:::your-cloudtrail-bucket",
"arn:aws:s3:::your-vpc-flow-logs-bucket/",
"arn:aws:s3:::your-vpc-flow-logs-bucket",
"arn:aws:s3:::your-security-logs-bucket/",
"arn:aws:s3:::your-security-logs-bucket"
},
"Sid": "AthenaResultsAccess",
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:ListBucket",
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::your-athena-results-bucket/",
"arn:aws:s3:::your-athena-results-bucket"
#### Required AWS Managed Policies
SecurityAudit Policy (Required)
Attach the AWS managed SecurityAudit policy to your MCP Server's IAM user or IAM role:
Policy ARN: arn:aws:iam::aws:policy/SecurityAudit
This policy provides comprehensive read-only access to AWS security services and is essential for AWS Security MCP functionality. It includes permissions for:

收录徽章（可选）

想把收录标记放进 README 就复制这行，可选，不影响收录。

[![Listed on Anclum](https://anclum.com/badge/listed.svg)](https://anclum.com/zh/s/groovybugify-aws-security-mcp/)

来源: awesome · https://github.com/groovyBugify/aws-security-mcp
按领域浏览: MCP 服务
收录来源: 10 个独立来源
收录于: 今天

所属领域与标签

MCP 服务6,229 条 MCP 服务端6,545 条入选精选清单6,618 条

每个标签都能点进去看同类的全部条目。数字是当前库里的真实条数。

浏览全部领域 →

← 返回索引

groovyBugify/aws-security-mcp

# AWS Security MCP

同类推荐

所属领域与标签