aws-cloud-ops

Provides 90%+ context savings vs raw AWS MCP server. Multi-service support with progressive disclosure by service category.

• AWS CLI v2
• Configured credentials (AWS_PROFILE or ~/.aws/credentials)
• AWS_REGION environment variable

CloudWatch Operations

| Tool | Description | Confirmation |

| ------------ | ----------------- | ------------ |

| logs-groups | List log groups | No |

| logs-tail | Tail log stream | No |

| logs-filter | Filter log events | No |

| metrics-list | List metrics | No |

| metrics-get | Get metric data | No |

| alarm-list | List alarms | No |

| alarm-create | Create alarm | Yes |

S3 Operations

| Tool | Description | Confirmation |

| ------- | -------------------- | ------------ |

| s3-ls | List buckets/objects | No |

| s3-cp | Copy objects | Yes |

| s3-sync | Sync directories | Yes |

| s3-rm | Delete objects | Yes |

Lambda Operations

| Tool | Description | Confirmation |

| ------------- | -------------------- | ------------ |

| lambda-list | List functions | No |

| lambda-get | Get function details | No |

| lambda-invoke | Invoke function | Yes |

| lambda-logs | Get function logs | No |

EC2 Operations

| Tool | Description | Confirmation |

| ------------ | -------------------- | ------------ |

| ec2-list | List instances | No |

| ec2-describe | Describe instance | No |

| ec2-start | Start instance | Yes |

| ec2-stop | Stop instance | Yes |

| sg-list | List security groups | No |

IAM Operations (Read-Only)

| Tool | Description | Confirmation |

| ------------ | ------------- | ------------ |

| iam-users | List users | No |

| iam-roles | List roles | No |

| iam-policies | List policies | No |

```bash

# List EC2 instances

aws ec2 describe-instances --output table

# Tail CloudWatch logs

aws logs tail /aws/lambda/my-function --follow

# List S3 buckets

aws s3 ls

# Invoke Lambda

aws lambda invoke --function-name my-func output.json

```

• AWS_PROFILE: Named profile to use
• AWS_REGION: Target region (e.g., us-east-1)
• AWS_DEFAULT_OUTPUT: Output format (json/table/text)

⚠️ Never hardcode credentials

⚠️ Use IAM roles when possible

⚠️ IAM write operations are blocked

• devops (primary): Cloud operations
• cloud-integrator (primary): Multi-cloud
• incident-responder (secondary): Troubleshooting

| Issue | Solution |

| ------------- | --------------------- |

| Access denied | Check IAM permissions |

| Region error | Set AWS_REGION |

| Credentials | Run aws configure |

Before starting:

Read .claude/context/memory/learnings.md

After completing:

• New pattern -> .claude/context/memory/learnings.md
• Issue found -> .claude/context/memory/issues.md
• Decision made -> .claude/context/memory/decisions.md

> ASSUME INTERRUPTION: If it's not in memory, it didn't happen.