AWS MCP Server for Cloudflare Workers
370 tools available in the AWS MCP server. Each tool can be called by AI assistants to perform specific actions.
aws_cfn_list_stacksList CloudFormation stacks.
Args:
Common status values: CREATE_COMPLETE, UPDATE_COMPLETE, DELETE_IN_PROGRESS, ROLLBACK_COMPLETE
Returns stack summaries.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"statusFilter": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by status"
}
}
}aws_cfn_describe_stackGet details of a CloudFormation stack.
Args:
Returns stack configuration, parameters, outputs, and tags.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_get_templateGet the template body of a CloudFormation stack.
Args:
Returns the template in YAML or JSON format.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_list_stack_resourcesList resources in a CloudFormation stack.
Args:
Returns logical and physical resource IDs, types, and status.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_describe_stack_eventsGet events for a CloudFormation stack.
Args:
Returns stack events including status changes and error messages.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_create_stackCreate a new CloudFormation stack.
Args:
Returns the stack ID.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name"
},
"templateUrl": {
"type": "string",
"description": "Template S3 URL"
},
"capabilities": {
"type": "array",
"items": {
"type": "string"
},
"description": "Capabilities like CAPABILITY_IAM"
},
"templateBody": {
"type": "string",
"description": "Template body"
}
}
}aws_cloudfront_tag_resourceAdd or update tags on a CloudFront resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "CloudFront resource ARN"
}
}
}aws_cfn_update_stackUpdate an existing CloudFormation stack.
Args:
Returns the stack ID.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
},
"templateUrl": {
"type": "string",
"description": "New template S3 URL"
},
"capabilities": {
"type": "array",
"items": {
"type": "string"
},
"description": "Capabilities"
},
"templateBody": {
"type": "string",
"description": "New template body"
}
}
}aws_cfn_delete_stackDelete a CloudFormation stack.
Args:
WARNING: This will delete all resources created by the stack.
Returns confirmation.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_list_change_setsList change sets for a CloudFormation stack.
Args:
Returns change set summaries.
{
"type": "object",
"required": [
"stackName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"stackName": {
"type": "string",
"description": "Stack name or ID"
}
}
}aws_cfn_describe_change_setGet details of a CloudFormation change set.
Args:
Returns change set details including resource changes.
{
"type": "object",
"required": [
"stackName",
"changeSetName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"stackName": {
"type": "string",
"description": "Stack name or ID"
},
"changeSetName": {
"type": "string",
"description": "Change set name or ID"
}
}
}aws_cfn_create_change_setCreate a change set for a CloudFormation stack.
Args:
Returns the change set ID.
{
"type": "object",
"required": [
"stackName",
"changeSetName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
},
"templateUrl": {
"type": "string",
"description": "Template S3 URL"
},
"capabilities": {
"type": "array",
"items": {
"type": "string"
},
"description": "Capabilities"
},
"templateBody": {
"type": "string",
"description": "Template body"
},
"changeSetName": {
"type": "string",
"description": "Change set name"
},
"changeSetType": {
"enum": [
"CREATE",
"UPDATE"
],
"type": "string",
"description": "Change set type"
}
}
}aws_cfn_execute_change_setExecute a CloudFormation change set.
Args:
This applies the changes in the change set to the stack.
Returns confirmation.
{
"type": "object",
"required": [
"stackName",
"changeSetName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
},
"changeSetName": {
"type": "string",
"description": "Change set name or ID"
}
}
}aws_cfn_delete_change_setDelete a CloudFormation change set.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"stackName",
"changeSetName"
],
"properties": {
"stackName": {
"type": "string",
"description": "Stack name or ID"
},
"changeSetName": {
"type": "string",
"description": "Change set name or ID"
}
}
}aws_cfn_validate_templateValidate a CloudFormation template.
Args:
Returns template parameters, description, and required capabilities.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"templateUrl": {
"type": "string",
"description": "Template S3 URL"
},
"templateBody": {
"type": "string",
"description": "Template body"
}
}
}aws_cloudfront_list_distributionsList all CloudFront distributions.
Returns distributions with IDs, domains, and status.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_cloudfront_get_distributionGet details of a CloudFront distribution.
Args:
Returns distribution configuration including origins and behaviors.
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Distribution ID"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_list_tags_of_resourceList tags on a DynamoDB resource.
Args:
Returns the resource tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceArn": {
"type": "string",
"description": "DynamoDB resource ARN"
}
}
}aws_cloudfront_create_invalidationCreate a cache invalidation for a CloudFront distribution.
Args:
Returns the invalidation details including ID and status.
{
"type": "object",
"required": [
"distributionId",
"paths"
],
"properties": {
"paths": {
"type": "array",
"items": {
"type": "string"
},
"description": "Paths to invalidate"
},
"distributionId": {
"type": "string",
"description": "Distribution ID"
},
"callerReference": {
"type": "string",
"description": "Unique identifier"
}
}
}aws_cloudfront_list_invalidationsList cache invalidations for a CloudFront distribution.
Args:
Returns list of invalidations with IDs and status.
{
"type": "object",
"required": [
"distributionId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"distributionId": {
"type": "string",
"description": "Distribution ID"
}
}
}aws_cloudfront_get_invalidationGet details of a CloudFront cache invalidation.
Args:
Returns invalidation details including paths and status.
{
"type": "object",
"required": [
"distributionId",
"invalidationId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"distributionId": {
"type": "string",
"description": "Distribution ID"
},
"invalidationId": {
"type": "string",
"description": "Invalidation ID"
}
}
}aws_cloudfront_list_tags_for_resourceList tags on a CloudFront resource.
Args:
Returns the resource tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceArn": {
"type": "string",
"description": "CloudFront resource ARN"
}
}
}aws_cloudfront_untag_resourceRemove tags from a CloudFront resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "CloudFront resource ARN"
}
}
}aws_cloudwatch_list_metricsList available CloudWatch metrics.
Args:
Returns metrics with their namespaces, names, and dimensions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"namespace": {
"type": "string",
"description": "Namespace filter (e.g., 'AWS/EC2"
}
}
}aws_cloudwatch_get_metric_statisticsGet statistics for a CloudWatch metric.
Args:
Returns datapoints with timestamps and requested statistics.
{
"type": "object",
"required": [
"namespace",
"startTime",
"endTime",
"period"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"period": {
"type": "integer",
"minimum": 60,
"description": "Period in seconds (min 60)"
},
"endTime": {
"type": "string",
"description": "End time (ISO 8601)"
},
"namespace": {
"type": "string",
"description": "Metric namespace (e.g., 'AWS/EC2"
},
"startTime": {
"type": "string",
"description": "Start time (ISO 8601)"
},
"metricName": {
"type": "string",
"description": "Metric name (e.g., 'CPUUtilization"
}
}
}aws_cloudwatch_describe_alarmsList CloudWatch alarms.
Args:
Returns alarms with their states, metrics, and thresholds.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"alarmNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by alarm names"
}
}
}aws_cloudwatch_set_alarm_stateTemporarily set the state of a CloudWatch alarm.
This is useful for testing alarm actions.
Args:
Returns confirmation of the state change.
{
"type": "object",
"required": [
"alarmName",
"stateValue",
"stateReason"
],
"properties": {
"alarmName": {
"type": "string",
"description": "Alarm name"
},
"stateValue": {
"enum": [
"OK",
"ALARM",
"INSUFFICIENT_DATA"
],
"type": "string",
"description": "State to set"
},
"stateReason": {
"type": "string",
"description": "Reason for state change"
}
}
}aws_cloudwatch_put_metric_dataPublish custom metrics to CloudWatch.
Args:
Each metric requires:
Returns confirmation of the publish operation.
{
"type": "object",
"required": [
"namespace"
],
"properties": {
"namespace": {
"type": "string",
"description": "Metric namespace (e.g., 'MyApp/Metrics"
}
}
}aws_cloudwatch_logs_describe_log_groupsList CloudWatch Log Groups.
Args:
Returns log groups with stored bytes and retention settings.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"prefix": {
"type": "string",
"description": "Log group name prefix"
}
}
}aws_cloudwatch_logs_describe_log_streamsList log streams in a CloudWatch Log Group.
Args:
Returns log streams ordered by last event time.
{
"type": "object",
"required": [
"logGroupName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"logGroupName": {
"type": "string",
"description": "Log group name"
}
}
}aws_cloudwatch_logs_get_log_eventsGet log events from a CloudWatch Log Stream.
Args:
Returns log events with timestamps and messages.
{
"type": "object",
"required": [
"logGroupName",
"logStreamName"
],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 10000,
"minimum": 1,
"description": "Max events"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"endTime": {
"type": "number",
"description": "End time (epoch ms)"
},
"startTime": {
"type": "number",
"description": "Start time (epoch ms)"
},
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"logStreamName": {
"type": "string",
"description": "Log stream name"
}
}
}aws_cloudwatch_logs_filter_log_eventsSearch and filter log events across multiple log streams.
Args:
Returns matching log events with stream names and timestamps.
{
"type": "object",
"required": [
"logGroupName"
],
"properties": {
"limit": {
"type": "integer",
"default": 100,
"maximum": 10000,
"minimum": 1,
"description": "Max events"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"endTime": {
"type": "number",
"description": "End time (epoch ms)"
},
"startTime": {
"type": "number",
"description": "Start time (epoch ms)"
},
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"filterPattern": {
"type": "string",
"description": "Filter pattern (e.g., 'ERROR"
},
"logStreamNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter to specific streams"
}
}
}aws_dynamodb_describe_global_tableGet details of a DynamoDB global table.
Args:
Returns global table configuration and replication info.
{
"type": "object",
"required": [
"globalTableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"globalTableName": {
"type": "string",
"description": "Global table name"
}
}
}aws_dynamodb_tag_resourceAdd tags to a DynamoDB resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "DynamoDB resource ARN"
}
}
}aws_cloudwatch_put_metric_alarmCreate or update a CloudWatch metric alarm.
Args:
Returns confirmation of alarm creation.
{
"type": "object",
"required": [
"alarmName",
"namespace",
"metricName",
"statistic",
"period",
"evaluationPeriods",
"threshold",
"comparisonOperator"
],
"properties": {
"period": {
"type": "integer",
"minimum": 60,
"description": "Period in seconds"
},
"alarmName": {
"type": "string",
"description": "Alarm name"
},
"namespace": {
"type": "string",
"description": "Metric namespace"
},
"okActions": {
"type": "array",
"items": {
"type": "string"
},
"description": "SNS topic ARNs for OK state"
},
"statistic": {
"enum": [
"Average",
"Sum",
"Minimum",
"Maximum",
"SampleCount"
],
"type": "string",
"description": "Statistic"
},
"threshold": {
"type": "number",
"description": "Threshold value"
},
"dimensions": {
"type": "array",
"items": {
"type": "string"
},
"description": "Dimensions"
},
"metricName": {
"type": "string",
"description": "Metric name"
},
"alarmActions": {
"type": "array",
"items": {
"type": "string"
},
"description": "SNS topic ARNs for ALARM state"
},
"alarmDescription": {
"type": "string",
"description": "Alarm description"
},
"treatMissingData": {
"enum": [
"missing",
"ignore",
"breaching",
"notBreaching"
],
"type": "string",
"description": "How to treat missing data"
},
"evaluationPeriods": {
"type": "integer",
"minimum": 1,
"description": "Evaluation periods"
},
"comparisonOperator": {
"enum": [
"GreaterThanOrEqualToThreshold",
"GreaterThanThreshold",
"LessThanThreshold",
"LessThanOrEqualToThreshold",
""
],
"type": "string",
"description": "Comparison operator"
},
"insufficientDataActions": {
"type": "array",
"items": {
"type": "string"
},
"description": "SNS topic ARNs for INSUFFICIENT_DATA"
}
}
}aws_cloudwatch_delete_alarmsDelete CloudWatch alarms.
Args:
WARNING: This action cannot be undone.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"alarmNames"
],
"properties": {
"alarmNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Alarm names to delete"
}
}
}aws_cloudwatch_enable_alarm_actionsEnable actions for CloudWatch alarms.
Args:
Returns confirmation of action enablement.
{
"type": "object",
"required": [
"alarmNames"
],
"properties": {
"alarmNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Alarm names"
}
}
}aws_cloudwatch_disable_alarm_actionsDisable actions for CloudWatch alarms.
Useful for maintenance windows or to temporarily stop notifications.
Args:
Returns confirmation of action disablement.
{
"type": "object",
"required": [
"alarmNames"
],
"properties": {
"alarmNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Alarm names"
}
}
}aws_cloudwatch_logs_create_log_groupCreate a new CloudWatch Log Group.
Args:
Returns confirmation of creation.
{
"type": "object",
"required": [
"logGroupName"
],
"properties": {
"tags": {
"type": "object",
"description": "Tags"
},
"logGroupName": {
"type": "string",
"description": "Log group name"
}
}
}aws_cloudwatch_logs_delete_log_groupDelete a CloudWatch Log Group.
WARNING: This action permanently deletes the log group and all its log streams.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"logGroupName"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
}
}
}aws_dynamodb_describe_table_replica_auto_scalingDescribe auto scaling settings for a DynamoDB table replicas.
Args:
Returns replica auto scaling configuration.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "Table name"
}
}
}aws_cloudwatch_logs_put_retention_policySet the retention policy for a CloudWatch Log Group.
Args:
Valid retention values: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, 3653
Returns confirmation of policy update.
{
"type": "object",
"required": [
"logGroupName",
"retentionInDays"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"retentionInDays": {
"type": "integer",
"description": "Retention in days"
}
}
}aws_cloudwatch_logs_delete_retention_policyRemove the retention policy from a CloudWatch Log Group.
This causes logs to be retained indefinitely.
Args:
Returns confirmation of policy removal.
{
"type": "object",
"required": [
"logGroupName"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
}
}
}aws_cloudwatch_logs_create_log_streamCreate a new log stream in a CloudWatch Log Group.
Args:
Returns confirmation of stream creation.
{
"type": "object",
"required": [
"logGroupName",
"logStreamName"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"logStreamName": {
"type": "string",
"description": "Log stream name"
}
}
}aws_cloudwatch_logs_delete_log_streamDelete a log stream from a CloudWatch Log Group.
Args:
WARNING: This permanently deletes all log events in the stream.
Returns confirmation of stream deletion.
{
"type": "object",
"required": [
"logGroupName",
"logStreamName"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"logStreamName": {
"type": "string",
"description": "Log stream name"
}
}
}aws_cloudwatch_logs_put_log_eventsWrite log events to a CloudWatch Log Stream.
Args:
Each log event requires:
Returns the next sequence token for subsequent writes.
{
"type": "object",
"required": [
"logGroupName",
"logStreamName"
],
"properties": {
"logGroupName": {
"type": "string",
"description": "Log group name"
},
"logStreamName": {
"type": "string",
"description": "Log stream name"
},
"sequenceToken": {
"type": "string",
"description": "Sequence token"
}
}
}aws_dynamodb_list_tablesList all DynamoDB tables in the region.
Returns table names. Use describe_table for details.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_describe_tableGet detailed information about a DynamoDB table.
Args:
Returns table schema, billing mode, and throughput configuration.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
}
}
}aws_ec2_describe_addressesList Elastic IP addresses.
Args:
Returns list of Elastic IPs with associations and instance info.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"allocationIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by allocation IDs"
}
}
}aws_dynamodb_queryQuery items from a DynamoDB table using key conditions.
Args:
Returns matching items.
{
"type": "object",
"required": [
"tableName",
"keyConditionExpression",
"expressionAttributeValues"
],
"properties": {
"limit": {
"type": "integer",
"minimum": 1,
"description": "Max items to return"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"indexName": {
"type": "string",
"description": "Secondary index name"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"filterExpression": {
"type": "string",
"description": "Filter expression"
},
"scanIndexForward": {
"type": "boolean",
"default": true,
"description": "Sort ascending (true) or descending (false)"
},
"keyConditionExpression": {
"type": "string",
"description": "Key condition (e.g., 'PK = :pk"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
},
"expressionAttributeValues": {
"type": "object",
"description": "Attribute values"
}
}
}aws_dynamodb_scanScan all items in a DynamoDB table (expensive operation).
Use Query when possible. Scan reads every item in the table.
Args:
Returns matching items.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"limit": {
"type": "integer",
"minimum": 1,
"description": "Max items to return"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"indexName": {
"type": "string",
"description": "Secondary index name"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"filterExpression": {
"type": "string",
"description": "Filter expression"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
},
"expressionAttributeValues": {
"type": "object",
"description": "Attribute values"
}
}
}aws_dynamodb_describe_limitsDescribe DynamoDB account limits for capacity units.
Returns account and table capacity limits.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_get_itemGet a single item from DynamoDB by its primary key.
Args:
Returns the item or null if not found.
{
"type": "object",
"required": [
"tableName",
"key"
],
"properties": {
"key": {
"type": "object",
"description": "Primary key"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"consistentRead": {
"type": "boolean",
"default": false,
"description": "Use consistent read"
},
"projectionExpression": {
"type": "string",
"description": "Attributes to retrieve"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
}
}
}aws_dynamodb_put_itemPut an item into a DynamoDB table.
Args:
Returns confirmation of the put operation.
{
"type": "object",
"required": [
"tableName",
"item"
],
"properties": {
"item": {
"type": "object",
"description": "Item to put (with primary key)"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"conditionExpression": {
"type": "string",
"description": "Condition expression"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
},
"expressionAttributeValues": {
"type": "object",
"description": "Attribute values"
}
}
}aws_dynamodb_delete_itemDelete an item from a DynamoDB table.
Args:
Returns confirmation of the delete operation.
{
"type": "object",
"required": [
"tableName",
"key"
],
"properties": {
"key": {
"type": "object",
"description": "Primary key of item to delete"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"conditionExpression": {
"type": "string",
"description": "Condition expression"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
},
"expressionAttributeValues": {
"type": "object",
"description": "Attribute values"
}
}
}aws_dynamodb_update_itemUpdate an item in a DynamoDB table.
Args:
Returns confirmation of the update operation.
{
"type": "object",
"required": [
"tableName",
"key",
"updateExpression"
],
"properties": {
"key": {
"type": "object",
"description": "Primary key of item to update"
},
"tableName": {
"type": "string",
"description": "DynamoDB table name"
},
"updateExpression": {
"type": "string",
"description": "Update expression (e.g., 'SET #n = :val"
},
"conditionExpression": {
"type": "string",
"description": "Condition expression"
},
"expressionAttributeNames": {
"type": "object",
"description": "Attribute name substitutions"
},
"expressionAttributeValues": {
"type": "object",
"description": "Attribute values"
}
}
}aws_dynamodb_batch_get_itemGet multiple items from one or more DynamoDB tables in a single request.
Args:
Example requestItems: { "TableName": { "keys": [{"PK": {"S": "user#1"}}, {"PK": {"S": "user#2"}}], "projectionExpression": "attribute1, attribute2" } }
Returns items grouped by table name.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_batch_write_itemWrite (put or delete) multiple items to one or more DynamoDB tables.
Args:
Example requestItems: { "TableName": [ {"putRequest": {"item": {"PK": {"S": "user#1"}, "data": {"S": "value"}}}}, {"deleteRequest": {"key": {"PK": {"S": "user#2"}}}} ] }
Returns unprocessed items if any.
{
"type": "object",
"required": [
"putRequest",
"deleteRequest"
],
"properties": {
"putRequest": {
"type": "object"
},
"deleteRequest": {
"type": "object"
}
}
}aws_ec2_describe_availability_zonesList availability zones in the current region.
Returns list of availability zones with state and zone type.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_create_tableCreate a new DynamoDB table.
Args:
Returns the created table details.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"tableName": {
"type": "string",
"description": "Table name"
},
"billingMode": {
"enum": [
"PROVISIONED",
"PAY_PER_REQUEST"
],
"type": "string",
"default": "PAY_PER_REQUEST",
"description": "Billing mode"
}
}
}aws_dynamodb_delete_tableDelete a DynamoDB table.
Args:
WARNING: This action is irreversible. All data in the table will be permanently deleted.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"tableName": {
"type": "string",
"description": "Table name to delete"
}
}
}aws_ec2_describe_instancesList EC2 instances with optional filtering.
Args:
Returns list of instances with ID, type, state, IPs, and tags.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"instanceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by instance IDs"
}
}
}aws_dynamodb_update_time_to_liveEnable or disable Time To Live (TTL) on a DynamoDB table.
Args:
When enabled, items with the TTL attribute set to a past timestamp will be automatically deleted.
Returns confirmation of TTL update.
{
"type": "object",
"required": [
"tableName",
"attributeName",
"enabled"
],
"properties": {
"enabled": {
"type": "boolean",
"description": "Enable or disable TTL"
},
"tableName": {
"type": "string",
"description": "Table name"
},
"attributeName": {
"type": "string",
"description": "TTL attribute name"
}
}
}aws_dynamodb_describe_time_to_liveGet the TTL settings for a DynamoDB table.
Args:
Returns the TTL attribute name and status.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "Table name"
}
}
}aws_dynamodb_create_backupCreate an on-demand backup of a DynamoDB table.
Args:
Returns the backup details.
{
"type": "object",
"required": [
"tableName",
"backupName"
],
"properties": {
"tableName": {
"type": "string",
"description": "Table name"
},
"backupName": {
"type": "string",
"description": "Backup name"
}
}
}aws_dynamodb_list_backupsList backups for DynamoDB tables.
Args:
Returns list of backup summaries.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "Filter by table name"
}
}
}aws_dynamodb_describe_backupGet details of a DynamoDB backup.
Args:
Returns backup details including size and status.
{
"type": "object",
"required": [
"backupArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"backupArn": {
"type": "string",
"description": "Backup ARN"
}
}
}aws_dynamodb_delete_backupDelete a DynamoDB backup.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"backupArn"
],
"properties": {
"backupArn": {
"type": "string",
"description": "Backup ARN"
}
}
}aws_dynamodb_restore_table_from_backupRestore a DynamoDB table from a backup.
Args:
Returns the restored table details.
{
"type": "object",
"required": [
"targetTableName",
"backupArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"backupArn": {
"type": "string",
"description": "Backup ARN"
},
"targetTableName": {
"type": "string",
"description": "Target table name"
}
}
}aws_dynamodb_enable_continuous_backupsEnable point-in-time recovery (PITR) for a DynamoDB table.
Args:
Enables continuous backups which allow restore to any point in the last 35 days.
Returns confirmation.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"tableName": {
"type": "string",
"description": "Table name"
}
}
}aws_dynamodb_describe_continuous_backupsGet continuous backup (PITR) settings for a DynamoDB table.
Args:
Returns PITR status and restore window.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "Table name"
}
}
}aws_dynamodb_restore_table_to_point_in_timeRestore a DynamoDB table to a specific point in time.
Args:
Requires point-in-time recovery to be enabled on the source table.
Returns the restored table details.
{
"type": "object",
"required": [
"sourceTableName",
"targetTableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"restoreDateTime": {
"type": "string",
"description": "ISO timestamp to restore to"
},
"sourceTableName": {
"type": "string",
"description": "Source table name"
},
"targetTableName": {
"type": "string",
"description": "Target table name"
}
}
}aws_dynamodb_update_tableUpdate a DynamoDB table's settings.
Args:
Returns the updated table details.
{
"type": "object",
"required": [
"tableName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"tableName": {
"type": "string",
"description": "Table name"
},
"billingMode": {
"enum": [
"PROVISIONED",
"PAY_PER_REQUEST"
],
"type": "string",
"description": "Billing mode"
},
"readCapacityUnits": {
"type": "integer",
"minimum": 1,
"description": "Read capacity units"
},
"writeCapacityUnits": {
"type": "integer",
"minimum": 1,
"description": "Write capacity units"
}
}
}aws_dynamodb_list_global_tablesList DynamoDB global tables.
Returns global tables with their replication regions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_dynamodb_untag_resourceRemove tags from a DynamoDB resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "DynamoDB resource ARN"
}
}
}aws_ec2_describe_security_groupsList EC2 security groups.
Args:
Returns security groups with their inbound/outbound rules.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"groupIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by security group IDs"
}
}
}aws_ec2_describe_volumesList EBS volumes.
Args:
Returns volumes with size, type, state, and attachments.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"volumeIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by volume IDs"
}
}
}aws_ec2_describe_vpcsList VPCs in the region.
Args:
Returns VPCs with CIDR blocks and configuration.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"vpcIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by VPC IDs"
}
}
}aws_ec2_describe_subnetsList subnets in the region.
Args:
Returns subnets with CIDR blocks, AZ, and available IPs.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"subnetIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by subnet IDs"
}
}
}aws_ec2_describe_imagesList AMI images.
Args:
Returns AMIs with name, architecture, and platform info.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"owners": {
"type": "array",
"items": {
"type": "string"
},
"description": "Owner IDs (e.g., 'self', 'amazon"
},
"imageIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by AMI IDs"
}
}
}aws_ec2_describe_key_pairsList EC2 key pairs for SSH access.
Returns all key pairs with names and fingerprints.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_ec2_start_instancesStart one or more stopped EC2 instances.
Args:
Returns confirmation of the start operation.
{
"type": "object",
"required": [
"instanceIds"
],
"properties": {
"instanceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Instance IDs to start"
}
}
}aws_ec2_stop_instancesStop one or more running EC2 instances.
Args:
Returns confirmation of the stop operation.
{
"type": "object",
"required": [
"instanceIds"
],
"properties": {
"instanceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Instance IDs to stop"
}
}
}aws_ec2_reboot_instancesReboot one or more EC2 instances.
Args:
Returns confirmation of the reboot operation.
{
"type": "object",
"required": [
"instanceIds"
],
"properties": {
"instanceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Instance IDs to reboot"
}
}
}aws_ec2_terminate_instancesTerminate (permanently delete) one or more EC2 instances.
WARNING: This action is irreversible. The instances and their data will be permanently deleted.
Args:
Returns confirmation of the termination.
{
"type": "object",
"required": [
"instanceIds"
],
"properties": {
"instanceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Instance IDs to terminate"
}
}
}aws_ec2_describe_snapshotsList EBS snapshots.
Args:
Returns list of snapshots with ID, volume, state, and size.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"ownerIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by owner IDs"
},
"snapshotIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by snapshot IDs"
}
}
}aws_ec2_describe_nat_gatewaysList NAT gateways.
Args:
Returns list of NAT gateways with state, VPC, subnet, and addresses.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"natGatewayIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by NAT gateway IDs"
}
}
}aws_ec2_describe_launch_templatesList EC2 launch templates.
Args:
Returns list of launch templates with ID, name, and version info.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"launchTemplateIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by launch template IDs"
}
}
}aws_ec2_create_security_groupCreate a new EC2 security group.
Args:
Returns the security group ID.
{
"type": "object",
"required": [
"groupName",
"description"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID"
},
"groupName": {
"type": "string",
"description": "Security group name"
},
"description": {
"type": "string",
"description": "Security group description"
}
}
}aws_ec2_delete_security_groupDelete an EC2 security group.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"groupId"
],
"properties": {
"groupId": {
"type": "string",
"description": "Security group ID"
}
}
}aws_ecs_list_servicesList services in an ECS cluster.
Args:
Returns service ARNs.
{
"type": "object",
"required": [
"clusterArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
}
}
}aws_ec2_authorize_security_group_ingressAdd inbound rules to a security group.
Args:
Each rule can include:
Returns confirmation of rule addition.
{
"type": "object",
"required": [
"groupId"
],
"properties": {
"groupId": {
"type": "string",
"description": "Security group ID"
}
}
}aws_ec2_revoke_security_group_ingressRemove inbound rules from a security group.
Args:
Each rule must match an existing rule exactly.
Returns confirmation of rule removal.
{
"type": "object",
"required": [
"groupId"
],
"properties": {
"groupId": {
"type": "string",
"description": "Security group ID"
}
}
}aws_ec2_authorize_security_group_egressAdd outbound rules to a security group.
Args:
Each rule can include:
Returns confirmation of rule addition.
{
"type": "object",
"required": [
"groupId"
],
"properties": {
"groupId": {
"type": "string",
"description": "Security group ID"
}
}
}aws_ec2_revoke_security_group_egressRemove outbound rules from a security group.
Args:
Each rule must match an existing rule exactly.
Returns confirmation of rule removal.
{
"type": "object",
"required": [
"groupId"
],
"properties": {
"groupId": {
"type": "string",
"description": "Security group ID"
}
}
}aws_ec2_allocate_addressAllocate a new Elastic IP address.
Returns the allocation ID and public IP address.
{
"type": "object",
"properties": {}
}aws_ec2_release_addressRelease an Elastic IP address.
Args:
Returns confirmation of release.
{
"type": "object",
"required": [
"allocationId"
],
"properties": {
"allocationId": {
"type": "string",
"description": "Allocation ID"
}
}
}aws_ec2_associate_addressAssociate an Elastic IP with an instance or network interface.
Args:
Either instanceId or networkInterfaceId must be provided.
Returns the association ID.
{
"type": "object",
"required": [
"allocationId"
],
"properties": {
"instanceId": {
"type": "string",
"description": "Instance ID"
},
"allocationId": {
"type": "string",
"description": "Allocation ID"
},
"networkInterfaceId": {
"type": "string",
"description": "Network interface ID"
}
}
}aws_ec2_disassociate_addressDisassociate an Elastic IP from an instance or network interface.
Args:
Returns confirmation of disassociation.
{
"type": "object",
"required": [
"associationId"
],
"properties": {
"associationId": {
"type": "string",
"description": "Association ID"
}
}
}aws_ec2_create_tagsAdd or overwrite tags on EC2 resources.
Args:
Returns confirmation of tag creation.
{
"type": "object",
"required": [
"resourceIds"
],
"properties": {
"resourceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Resource IDs"
}
}
}aws_ec2_delete_tagsDelete tags from EC2 resources.
Args:
Returns confirmation of tag deletion.
{
"type": "object",
"required": [
"resourceIds"
],
"properties": {
"resourceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Resource IDs"
}
}
}aws_ec2_create_volumeCreate a new EBS volume.
Args:
Returns the created volume details.
{
"type": "object",
"required": [
"availabilityZone"
],
"properties": {
"iops": {
"type": "integer",
"description": "IOPS (for io1/io2/gp3)"
},
"size": {
"type": "integer",
"description": "Size in GiB"
},
"kmsKeyId": {
"type": "string",
"description": "KMS key ID"
},
"encrypted": {
"type": "boolean",
"description": "Enable encryption"
},
"snapshotId": {
"type": "string",
"description": "Snapshot ID to create from"
},
"volumeType": {
"enum": [
"gp2",
"gp3",
"io1",
"io2",
"st1",
"sc1",
"standard"
],
"type": "string",
"description": "Volume type"
},
"availabilityZone": {
"type": "string",
"description": "Availability zone"
}
}
}aws_ec2_delete_volumeDelete an EBS volume.
WARNING: This action cannot be undone.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"volumeId"
],
"properties": {
"volumeId": {
"type": "string",
"description": "Volume ID"
}
}
}aws_ec2_attach_volumeAttach an EBS volume to an EC2 instance.
Args:
Returns attachment details.
{
"type": "object",
"required": [
"volumeId",
"instanceId",
"device"
],
"properties": {
"device": {
"type": "string",
"description": "Device name (e.g., /dev/sdf)"
},
"volumeId": {
"type": "string",
"description": "Volume ID"
},
"instanceId": {
"type": "string",
"description": "Instance ID"
}
}
}aws_ec2_detach_volumeDetach an EBS volume from an EC2 instance.
Args:
Returns detachment details.
{
"type": "object",
"required": [
"volumeId"
],
"properties": {
"force": {
"type": "boolean",
"description": "Force detach"
},
"volumeId": {
"type": "string",
"description": "Volume ID"
}
}
}aws_ec2_create_snapshotCreate a snapshot of an EBS volume.
Args:
Returns the created snapshot details.
{
"type": "object",
"required": [
"volumeId"
],
"properties": {
"volumeId": {
"type": "string",
"description": "Volume ID"
},
"description": {
"type": "string",
"description": "Snapshot description"
}
}
}aws_ec2_delete_snapshotDelete an EBS snapshot.
WARNING: This action cannot be undone.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"snapshotId"
],
"properties": {
"snapshotId": {
"type": "string",
"description": "Snapshot ID"
}
}
}aws_ec2_copy_snapshotCopy an EBS snapshot, optionally to a different region.
Args:
Returns the new snapshot ID.
{
"type": "object",
"required": [
"sourceSnapshotId",
"sourceRegion"
],
"properties": {
"description": {
"type": "string",
"description": "Description"
},
"sourceRegion": {
"type": "string",
"description": "Source region"
},
"sourceSnapshotId": {
"type": "string",
"description": "Source snapshot ID"
}
}
}aws_ec2_create_vpcCreate a new VPC.
Args:
Returns the created VPC details.
{
"type": "object",
"required": [
"cidrBlock"
],
"properties": {
"cidrBlock": {
"type": "string",
"description": "IPv4 CIDR block (e.g., 10.0.0.0/16)"
},
"instanceTenancy": {
"enum": [
"default",
"dedicated"
],
"type": "string",
"description": "Instance tenancy"
}
}
}aws_ec2_delete_vpcDelete a VPC.
Args:
Note: The VPC must have no dependencies (subnets, IGWs, etc.).
{
"type": "object",
"required": [
"vpcId"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID to delete"
}
}
}aws_ec2_create_subnetCreate a subnet in a VPC.
Args:
Returns the created subnet details.
{
"type": "object",
"required": [
"vpcId",
"cidrBlock"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID"
},
"cidrBlock": {
"type": "string",
"description": "IPv4 CIDR block"
},
"availabilityZone": {
"type": "string",
"description": "Availability zone"
}
}
}aws_ec2_delete_subnetDelete a subnet.
Args:
{
"type": "object",
"required": [
"subnetId"
],
"properties": {
"subnetId": {
"type": "string",
"description": "Subnet ID to delete"
}
}
}aws_ec2_describe_internet_gatewaysList internet gateways.
Args:
Returns internet gateways with their VPC attachments.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"internetGatewayIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by gateway IDs"
}
}
}aws_ec2_create_internet_gatewayCreate an internet gateway.
Returns the created internet gateway ID.
{
"type": "object",
"properties": {}
}aws_ec2_delete_internet_gatewayDelete an internet gateway.
Args:
Note: The gateway must be detached from all VPCs first.
{
"type": "object",
"required": [
"internetGatewayId"
],
"properties": {
"internetGatewayId": {
"type": "string",
"description": "Internet gateway ID"
}
}
}aws_ec2_attach_internet_gatewayAttach an internet gateway to a VPC.
Args:
{
"type": "object",
"required": [
"internetGatewayId",
"vpcId"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID"
},
"internetGatewayId": {
"type": "string",
"description": "Internet gateway ID"
}
}
}aws_ec2_detach_internet_gatewayDetach an internet gateway from a VPC.
Args:
{
"type": "object",
"required": [
"internetGatewayId",
"vpcId"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID"
},
"internetGatewayId": {
"type": "string",
"description": "Internet gateway ID"
}
}
}aws_ec2_describe_route_tablesList route tables.
Args:
Returns route tables with their routes.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"routeTableIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by route table IDs"
}
}
}aws_ec2_create_route_tableCreate a route table in a VPC.
Args:
Returns the created route table ID.
{
"type": "object",
"required": [
"vpcId"
],
"properties": {
"vpcId": {
"type": "string",
"description": "VPC ID"
}
}
}aws_ec2_delete_route_tableDelete a route table.
Args:
Note: Cannot delete the main route table.
{
"type": "object",
"required": [
"routeTableId"
],
"properties": {
"routeTableId": {
"type": "string",
"description": "Route table ID"
}
}
}aws_ec2_create_routeCreate a route in a route table.
Args:
One of gatewayId or natGatewayId is required.
{
"type": "object",
"required": [
"routeTableId",
"destinationCidrBlock"
],
"properties": {
"gatewayId": {
"type": "string",
"description": "Internet gateway ID"
},
"natGatewayId": {
"type": "string",
"description": "NAT gateway ID"
},
"routeTableId": {
"type": "string",
"description": "Route table ID"
},
"destinationCidrBlock": {
"type": "string",
"description": "Destination CIDR"
}
}
}aws_ecs_create_clusterCreate a new ECS cluster.
Args:
Returns the created cluster details.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"clusterName": {
"type": "string",
"description": "Cluster name"
}
}
}aws_ec2_delete_routeDelete a route from a route table.
Args:
{
"type": "object",
"required": [
"routeTableId",
"destinationCidrBlock"
],
"properties": {
"routeTableId": {
"type": "string",
"description": "Route table ID"
},
"destinationCidrBlock": {
"type": "string",
"description": "Destination CIDR"
}
}
}aws_ec2_associate_route_tableAssociate a route table with a subnet.
Args:
Returns the association ID.
{
"type": "object",
"required": [
"routeTableId",
"subnetId"
],
"properties": {
"subnetId": {
"type": "string",
"description": "Subnet ID"
},
"routeTableId": {
"type": "string",
"description": "Route table ID"
}
}
}aws_ec2_disassociate_route_tableDisassociate a route table from a subnet.
Args:
{
"type": "object",
"required": [
"associationId"
],
"properties": {
"associationId": {
"type": "string",
"description": "Association ID"
}
}
}aws_ec2_describe_network_interfacesList EC2 network interfaces.
Args:
Returns network interfaces with subnet, VPC, IP, and attachment info.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"networkInterfaceIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Network interface IDs"
}
}
}aws_ec2_create_network_interfaceCreate a network interface in a subnet.
Args:
Returns the created network interface details.
{
"type": "object",
"required": [
"subnetId"
],
"properties": {
"subnetId": {
"type": "string",
"description": "Subnet ID"
},
"description": {
"type": "string",
"description": "Description"
},
"securityGroupIds": {
"type": "array",
"items": {
"type": "string"
},
"description": "Security group IDs"
}
}
}aws_ec2_delete_network_interfaceDelete a network interface.
Args:
Note: The interface must be detached first.
{
"type": "object",
"required": [
"networkInterfaceId"
],
"properties": {
"networkInterfaceId": {
"type": "string",
"description": "Network interface ID"
}
}
}aws_ec2_attach_network_interfaceAttach a network interface to an instance.
Args:
Returns the attachment ID.
{
"type": "object",
"required": [
"networkInterfaceId",
"instanceId",
"deviceIndex"
],
"properties": {
"instanceId": {
"type": "string",
"description": "Instance ID"
},
"deviceIndex": {
"type": "integer",
"minimum": 0,
"description": "Device index"
},
"networkInterfaceId": {
"type": "string",
"description": "Network interface ID"
}
}
}aws_ec2_detach_network_interfaceDetach a network interface from an instance.
Args:
{
"type": "object",
"required": [
"attachmentId"
],
"properties": {
"force": {
"type": "boolean",
"description": "Force detachment"
},
"attachmentId": {
"type": "string",
"description": "Attachment ID"
}
}
}aws_ec2_describe_placement_groupsList EC2 placement groups.
Args:
Returns placement groups with strategy and state.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"groupNames": {
"type": "array",
"items": {
"type": "string"
},
"description": "Placement group names"
}
}
}aws_ec2_create_placement_groupCreate an EC2 placement group.
Args:
Returns the created placement group name.
{
"type": "object",
"required": [
"groupName",
"strategy"
],
"properties": {
"strategy": {
"enum": [
"cluster",
"spread",
"partition"
],
"type": "string",
"description": "Placement strategy"
},
"groupName": {
"type": "string",
"description": "Placement group name"
}
}
}aws_ec2_delete_placement_groupDelete an EC2 placement group.
Args:
Note: The group must not have any instances.
{
"type": "object",
"required": [
"groupName"
],
"properties": {
"groupName": {
"type": "string",
"description": "Placement group name"
}
}
}aws_ec2_modify_instance_attributeModify an EC2 instance attribute.
Args:
Note: Instance must be stopped for some attributes.
{
"type": "object",
"required": [
"instanceId",
"attribute",
"value"
],
"properties": {
"value": {
"type": "string",
"description": "New value"
},
"attribute": {
"type": "string",
"description": "Attribute name"
},
"instanceId": {
"type": "string",
"description": "Instance ID"
}
}
}aws_ec2_get_console_outputGet the console output from an EC2 instance.
Args:
Returns the console output text (useful for debugging boot issues).
{
"type": "object",
"required": [
"instanceId"
],
"properties": {
"instanceId": {
"type": "string",
"description": "Instance ID"
}
}
}aws_ecs_list_clustersList all ECS clusters in the region.
Returns cluster ARNs. Use describe_clusters for details.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_ecs_describe_clustersGet details of ECS clusters.
Args:
Returns cluster details including running tasks and services.
{
"type": "object",
"required": [
"clusterArns"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArns": {
"type": "array",
"items": {
"type": "string"
},
"description": "Cluster ARNs"
}
}
}aws_ecs_describe_servicesGet details of ECS services.
Args:
Returns service configuration including desired and running counts.
{
"type": "object",
"required": [
"clusterArn",
"serviceArns"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"serviceArns": {
"type": "array",
"items": {
"type": "string"
},
"description": "Service ARNs"
}
}
}aws_ecs_list_tasksList tasks in an ECS cluster.
Args:
Returns task ARNs.
{
"type": "object",
"required": [
"clusterArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"serviceName": {
"type": "string",
"description": "Filter by service name"
}
}
}aws_ecs_describe_tasksGet details of ECS tasks.
Args:
Returns task details including status and containers.
{
"type": "object",
"required": [
"clusterArn",
"taskArns"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"taskArns": {
"type": "array",
"items": {
"type": "string"
},
"description": "Task ARNs"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
}
}
}aws_ecs_describe_task_definitionGet details of an ECS task definition.
Args:
Returns task definition including container definitions.
{
"type": "object",
"required": [
"taskDefinition"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"taskDefinition": {
"type": "string",
"description": "Task definition family:revision or ARN"
}
}
}aws_ecs_list_task_definitionsList ECS task definition ARNs.
Args:
Returns task definition ARNs.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"familyPrefix": {
"type": "string",
"description": "Family prefix filter"
}
}
}aws_ecs_update_serviceUpdate an ECS service.
Args:
Returns the updated service details.
{
"type": "object",
"required": [
"clusterArn",
"serviceName"
],
"properties": {
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"serviceName": {
"type": "string",
"description": "Service name"
},
"desiredCount": {
"type": "integer",
"minimum": 0,
"description": "Desired task count"
},
"taskDefinition": {
"type": "string",
"description": "New task definition"
},
"forceNewDeployment": {
"type": "boolean",
"default": false,
"description": "Force new deployment"
}
}
}aws_ecs_run_taskRun a new task in an ECS cluster.
Args:
Returns the started task details.
{
"type": "object",
"required": [
"clusterArn",
"taskDefinition"
],
"properties": {
"count": {
"type": "integer",
"maximum": 10,
"minimum": 1,
"description": "Number of tasks to run"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"launchType": {
"enum": [
"EC2",
"FARGATE"
],
"type": "string",
"description": "Launch type"
},
"taskDefinition": {
"type": "string",
"description": "Task definition family:revision or ARN"
}
}
}aws_ecs_stop_taskStop a running ECS task.
Args:
Returns the stopped task details.
{
"type": "object",
"required": [
"clusterArn",
"taskArn"
],
"properties": {
"reason": {
"type": "string",
"description": "Reason for stopping"
},
"taskArn": {
"type": "string",
"description": "Task ARN"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
}
}
}aws_ecs_delete_serviceDelete an ECS service.
Args:
Note: Before deleting, you should typically scale the service to 0 first, or use force=true to delete a service with running tasks.
Returns the deleted service details.
{
"type": "object",
"required": [
"clusterArn",
"serviceName"
],
"properties": {
"force": {
"type": "boolean",
"description": "Force delete with running tasks"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"serviceName": {
"type": "string",
"description": "Service name"
}
}
}aws_ecs_deregister_task_definitionDeregister an ECS task definition.
Args:
Deregistered task definitions can no longer be used to run new tasks, but existing tasks using this definition will continue to run.
Returns the deregistered task definition details.
{
"type": "object",
"required": [
"taskDefinition"
],
"properties": {
"taskDefinition": {
"type": "string",
"description": "Task definition ARN or family:revision"
}
}
}aws_ecs_list_container_instancesList container instances in an ECS cluster.
Args:
Returns container instance ARNs.
{
"type": "object",
"required": [
"clusterArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
}
}
}aws_ecs_describe_container_instancesGet details of ECS container instances.
Args:
Returns container instance details including EC2 instance ID and task counts.
{
"type": "object",
"required": [
"clusterArn",
"containerInstanceArns"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"containerInstanceArns": {
"type": "array",
"items": {
"type": "string"
},
"description": "Container instance ARNs"
}
}
}aws_ecs_delete_clusterDelete an ECS cluster.
Args:
Note: The cluster must not have any services or tasks running.
Returns the deleted cluster details.
{
"type": "object",
"required": [
"clusterArn"
],
"properties": {
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
}
}
}aws_ecs_create_serviceCreate a new ECS service.
Args:
Returns the created service details.
{
"type": "object",
"required": [
"clusterArn",
"serviceName",
"taskDefinition",
"desiredCount"
],
"properties": {
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"launchType": {
"enum": [
"EC2",
"FARGATE"
],
"type": "string",
"description": "Launch type"
},
"serviceName": {
"type": "string",
"description": "Service name"
},
"desiredCount": {
"type": "integer",
"minimum": 0,
"description": "Desired task count"
},
"taskDefinition": {
"type": "string",
"description": "Task definition family:revision or ARN"
}
}
}aws_ecs_tag_resourceAdd tags to an ECS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "ECS resource ARN"
}
}
}aws_ecs_untag_resourceRemove tags from an ECS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "ECS resource ARN"
}
}
}aws_ecs_list_tags_for_resourceList tags on an ECS resource.
Args:
Returns the resource tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceArn": {
"type": "string",
"description": "ECS resource ARN"
}
}
}aws_ecs_list_task_definition_familiesList ECS task definition families.
Args:
Returns task definition family names.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"familyPrefix": {
"type": "string",
"description": "Family prefix filter"
}
}
}aws_ecs_update_container_instances_stateUpdate the state of ECS container instances.
Args:
Use DRAINING to stop new tasks from being placed on the instances.
Returns the updated container instance details.
{
"type": "object",
"required": [
"clusterArn",
"containerInstanceArns",
"status"
],
"properties": {
"status": {
"enum": [
"ACTIVE",
"DRAINING"
],
"type": "string",
"description": "New status"
},
"clusterArn": {
"type": "string",
"description": "Cluster ARN"
},
"containerInstanceArns": {
"type": "array",
"items": {
"type": "string"
},
"description": "Container instance ARNs"
}
}
}aws_eks_list_clustersList all EKS clusters in the region.
Returns cluster names. Use describe_cluster for details.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_eks_describe_clusterGet detailed information about an EKS cluster.
Args:
Returns cluster configuration including endpoint, version, and VPC settings.
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "EKS cluster name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_eks_list_nodegroupsList all node groups in an EKS cluster.
Args:
Returns node group names.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_eks_describe_nodegroupGet detailed information about an EKS node group.
Args:
Returns node group configuration including scaling settings and instance types.
{
"type": "object",
"required": [
"clusterName",
"nodegroupName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
},
"nodegroupName": {
"type": "string",
"description": "Node group name"
}
}
}aws_eks_list_fargate_profilesList all Fargate profiles in an EKS cluster.
Args:
Returns Fargate profile names.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_eks_describe_fargate_profileGet detailed information about an EKS Fargate profile.
Args:
Returns Fargate profile configuration including selectors and subnets.
{
"type": "object",
"required": [
"clusterName",
"fargateProfileName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
},
"fargateProfileName": {
"type": "string",
"description": "Fargate profile name"
}
}
}aws_eks_list_addonsList all addons in an EKS cluster.
Args:
Returns addon names. Use describe_addon for details.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_eks_describe_addonGet detailed information about an EKS addon.
Args:
Returns addon configuration including version, status, and health.
{
"type": "object",
"required": [
"clusterName",
"addonName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"addonName": {
"type": "string",
"description": "Addon name (e.g., vpc-cni, coredns, kube-proxy)"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_eks_list_identity_provider_configsList all identity provider configurations in an EKS cluster.
Args:
Returns identity provider config names and types.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_eks_describe_identity_provider_configGet detailed information about an EKS identity provider configuration.
Args:
Returns identity provider config details including OIDC settings.
{
"type": "object",
"required": [
"clusterName",
"type",
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Identity provider config name"
},
"type": {
"type": "string",
"description": "Identity provider type (e.g., oidc)"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
}
}
}aws_iam_list_instance_profilesList IAM instance profiles.
Returns instance profiles with names, IDs, and attached roles.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_eks_update_nodegroup_configUpdate the configuration of an EKS node group.
Args:
Returns the update ID and status.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"clusterName": {
"type": "string",
"description": "EKS cluster name"
},
"nodegroupName": {
"type": "string",
"description": "Node group name"
}
}
}aws_eks_tag_resourceAdd tags to an EKS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tags"
],
"properties": {
"tags": {
"type": "object",
"description": "Tags to add"
},
"resourceArn": {
"type": "string",
"description": "EKS resource ARN"
}
}
}aws_eks_untag_resourceRemove tags from an EKS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "EKS resource ARN"
}
}
}aws_eks_list_updatesList updates for an EKS cluster, nodegroup, or addon.
Args:
Returns update IDs.
{
"type": "object",
"required": [
"clusterName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"addonName": {
"type": "string",
"description": "Addon name filter"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
},
"nodegroupName": {
"type": "string",
"description": "Node group name filter"
}
}
}aws_eks_describe_updateGet details of an EKS update.
Args:
Returns update details including status and errors.
{
"type": "object",
"required": [
"clusterName",
"updateId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"updateId": {
"type": "string",
"description": "Update ID"
},
"addonName": {
"type": "string",
"description": "Addon name"
},
"clusterName": {
"type": "string",
"description": "EKS cluster name"
},
"nodegroupName": {
"type": "string",
"description": "Node group name"
}
}
}aws_iam_list_usersList all IAM users in the account.
Returns users with their names, IDs, creation dates, and last login times.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_iam_get_userGet detailed information about an IAM user.
Args:
Returns user details including ARN, creation date, and password last used.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"userName": {
"type": "string",
"description": "IAM user name"
}
}
}aws_iam_list_rolesList all IAM roles in the account.
Returns roles with their names, IDs, ARNs, and descriptions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_iam_get_roleGet detailed information about an IAM role.
Args:
Returns role details including trust policy and description.
{
"type": "object",
"required": [
"roleName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"roleName": {
"type": "string",
"description": "IAM role name"
}
}
}aws_iam_list_policiesList IAM policies in the account.
Args:
Returns policies with names, ARNs, and attachment counts.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"onlyAttached": {
"type": "boolean",
"default": false,
"description": "Only show attached policies"
}
}
}aws_iam_get_policyGet detailed information about an IAM policy.
Args:
Returns policy details including attachment count and description.
{
"type": "object",
"required": [
"policyArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"policyArn": {
"type": "string",
"description": "IAM policy ARN"
}
}
}aws_iam_list_groupsList all IAM groups in the account.
Returns groups with their names, IDs, and ARNs.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_iam_list_access_keysList access keys for an IAM user.
Args:
Returns access keys with their IDs, status, and creation dates.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"userName": {
"type": "string",
"description": "IAM user name"
}
}
}aws_iam_list_attached_user_policiesList managed policies attached to an IAM user.
Args:
Returns attached policies with names and ARNs.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"userName": {
"type": "string",
"description": "IAM user name"
}
}
}aws_iam_list_attached_role_policiesList managed policies attached to an IAM role.
Args:
Returns attached policies with names and ARNs.
{
"type": "object",
"required": [
"roleName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"roleName": {
"type": "string",
"description": "IAM role name"
}
}
}aws_iam_list_groups_for_userList IAM groups that a user belongs to.
Args:
Returns groups with names, IDs, and ARNs.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"userName": {
"type": "string",
"description": "IAM user name"
}
}
}aws_iam_list_mfa_devicesList MFA devices for an IAM user.
Args:
Returns MFA devices with serial numbers and enable dates.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"userName": {
"type": "string",
"description": "IAM user name"
}
}
}aws_iam_get_instance_profileGet details of an IAM instance profile.
Args:
Returns instance profile details including attached roles.
{
"type": "object",
"required": [
"instanceProfileName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"instanceProfileName": {
"type": "string",
"description": "Instance profile name"
}
}
}aws_iam_create_userCreate a new IAM user.
Args:
Returns the created user details.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "New user name"
}
}
}aws_iam_delete_userDelete an IAM user.
Args:
Note: The user must have no attached policies, access keys, or other resources before deletion.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "User name to delete"
}
}
}aws_iam_create_roleCreate a new IAM role.
Args:
Returns the created role details.
{
"type": "object",
"required": [
"roleName",
"assumeRolePolicyDocument"
],
"properties": {
"roleName": {
"type": "string",
"description": "New role name"
},
"description": {
"type": "string",
"description": "Role description"
},
"assumeRolePolicyDocument": {
"type": "string",
"description": "Trust policy JSON"
}
}
}aws_iam_delete_roleDelete an IAM role.
Args:
Note: The role must have no attached policies or instance profiles before deletion.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"roleName"
],
"properties": {
"roleName": {
"type": "string",
"description": "Role name to delete"
}
}
}aws_iam_attach_user_policyAttach a managed policy to an IAM user.
Args:
Returns confirmation of attachment.
{
"type": "object",
"required": [
"userName",
"policyArn"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_detach_user_policyDetach a managed policy from an IAM user.
Args:
Returns confirmation of detachment.
{
"type": "object",
"required": [
"userName",
"policyArn"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_attach_role_policyAttach a managed policy to an IAM role.
Args:
Returns confirmation of attachment.
{
"type": "object",
"required": [
"roleName",
"policyArn"
],
"properties": {
"roleName": {
"type": "string",
"description": "Role name"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_detach_role_policyDetach a managed policy from an IAM role.
Args:
Returns confirmation of detachment.
{
"type": "object",
"required": [
"roleName",
"policyArn"
],
"properties": {
"roleName": {
"type": "string",
"description": "Role name"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_create_access_keyCreate a new access key for an IAM user.
Args:
WARNING: The secret access key is only available at creation time. Make sure to save it securely.
Returns the new access key ID and secret access key.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
}
}
}aws_iam_delete_access_keyDelete an access key for an IAM user.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"userName",
"accessKeyId"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
},
"accessKeyId": {
"type": "string",
"description": "Access key ID"
}
}
}aws_iam_update_access_keyActivate or deactivate an access key.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"userName",
"accessKeyId",
"status"
],
"properties": {
"status": {
"enum": [
"Active",
"Inactive"
],
"type": "string",
"description": "Key status"
},
"userName": {
"type": "string",
"description": "User name"
},
"accessKeyId": {
"type": "string",
"description": "Access key ID"
}
}
}aws_iam_create_policyCreate a new IAM policy.
Args:
Returns the created policy details.
{
"type": "object",
"required": [
"policyName",
"policyDocument"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"policyName": {
"type": "string",
"description": "Policy name"
},
"description": {
"type": "string",
"description": "Policy description"
},
"policyDocument": {
"type": "string",
"description": "Policy document JSON"
}
}
}aws_iam_delete_policyDelete an IAM policy.
Args:
Note: Policy must be detached from all users, groups, and roles first. All policy versions except the default must be deleted first.
Returns confirmation.
{
"type": "object",
"required": [
"policyArn"
],
"properties": {
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_get_policy_versionGet a specific version of an IAM policy.
Args:
Returns the policy document for that version.
{
"type": "object",
"required": [
"policyArn",
"versionId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
},
"versionId": {
"type": "string",
"description": "Version ID"
}
}
}aws_iam_list_policy_versionsList all versions of an IAM policy.
Args:
Returns version IDs and which is the default.
{
"type": "object",
"required": [
"policyArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"policyArn": {
"type": "string",
"description": "Policy ARN"
}
}
}aws_iam_create_policy_versionCreate a new version of an IAM policy.
Args:
A policy can have up to 5 versions. Delete old versions if at the limit.
Returns the new version ID.
{
"type": "object",
"required": [
"policyArn",
"policyDocument"
],
"properties": {
"policyArn": {
"type": "string",
"description": "Policy ARN"
},
"setAsDefault": {
"type": "boolean",
"description": "Set as default version"
},
"policyDocument": {
"type": "string",
"description": "Policy document JSON"
}
}
}aws_iam_delete_policy_versionDelete a specific version of an IAM policy.
Args:
Note: Cannot delete the default version.
Returns confirmation.
{
"type": "object",
"required": [
"policyArn",
"versionId"
],
"properties": {
"policyArn": {
"type": "string",
"description": "Policy ARN"
},
"versionId": {
"type": "string",
"description": "Version ID"
}
}
}aws_iam_add_user_to_groupAdd an IAM user to a group.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"groupName",
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
},
"groupName": {
"type": "string",
"description": "Group name"
}
}
}aws_iam_remove_user_from_groupRemove an IAM user from a group.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"groupName",
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
},
"groupName": {
"type": "string",
"description": "Group name"
}
}
}aws_iam_create_groupCreate a new IAM group.
Args:
Returns the created group details.
{
"type": "object",
"required": [
"groupName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"groupName": {
"type": "string",
"description": "Group name"
}
}
}aws_iam_delete_groupDelete an IAM group.
Args:
Note: Group must be empty (no users) and have no policies attached.
Returns confirmation.
{
"type": "object",
"required": [
"groupName"
],
"properties": {
"groupName": {
"type": "string",
"description": "Group name"
}
}
}aws_iam_tag_userAdd or update tags on an IAM user.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"userName"
],
"properties": {
"userName": {
"type": "string",
"description": "User name"
}
}
}aws_route53_get_changeGet the status of a Route53 change request.
Args:
Returns change status (PENDING or INSYNC).
{
"type": "object",
"required": [
"changeId"
],
"properties": {
"changeId": {
"type": "string",
"description": "Change ID to check"
}
}
}aws_iam_untag_userRemove tags from an IAM user.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"userName",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"userName": {
"type": "string",
"description": "User name"
}
}
}aws_iam_tag_roleAdd or update tags on an IAM role.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"roleName"
],
"properties": {
"roleName": {
"type": "string",
"description": "Role name"
}
}
}aws_iam_untag_roleRemove tags from an IAM role.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"roleName",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"roleName": {
"type": "string",
"description": "Role name"
}
}
}aws_lambda_list_functionsList all Lambda functions in the region.
Returns functions with name, runtime, memory, timeout, and last modified date.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_lambda_get_functionGet detailed information about a Lambda function.
Args:
Returns full function configuration including environment variables and tags.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
}
}
}aws_lambda_invokeInvoke a Lambda function and get its response.
Args:
Returns the function's response payload for sync invocations.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"payload": {
"type": "object",
"description": "JSON payload for the function"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
}
}
}aws_lambda_list_aliasesList aliases for a Lambda function.
Args:
Returns aliases with their versions and descriptions.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
}
}
}aws_lambda_list_versionsList published versions of a Lambda function.
Args:
Returns version numbers with descriptions and modification dates.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
}
}
}aws_lambda_list_event_source_mappingsList event source mappings for Lambda functions.
Args:
Returns event source mappings with UUID, state, and batch settings.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"functionName": {
"type": "string",
"description": "Filter by function name"
}
}
}aws_lambda_list_layersList Lambda layers available in the region.
Returns layer names and ARNs with latest version info.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_lambda_list_layer_versionsList versions of a Lambda layer.
Args:
Returns layer versions with compatible runtimes and architectures.
{
"type": "object",
"required": [
"layerName"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"layerName": {
"type": "string",
"description": "Layer name"
}
}
}aws_lambda_get_function_concurrencyGet the reserved concurrency setting for a Lambda function.
Args:
Returns the reserved concurrent executions count (if set).
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_publish_versionPublish a new version of a Lambda function.
Args:
Returns the published version details.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"description": {
"type": "string",
"description": "Version description"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_update_function_configurationUpdate the configuration of a Lambda function.
Args:
Returns the updated function configuration.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"handler": {
"type": "string",
"description": "Function handler"
},
"runtime": {
"type": "string",
"description": "Runtime (e.g., nodejs18.x, python3.11)"
},
"timeout": {
"type": "integer",
"maximum": 900,
"minimum": 1,
"description": "Timeout in seconds"
},
"memorySize": {
"type": "integer",
"maximum": 10240,
"minimum": 128,
"description": "Memory in MB"
},
"description": {
"type": "string",
"description": "Function description"
},
"environment": {
"type": "object",
"description": "Environment variables"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_delete_functionDelete a Lambda function.
Args:
WARNING: This action is irreversible.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"qualifier": {
"type": "string",
"description": "Version or alias to delete"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_put_function_concurrencySet reserved concurrency for a Lambda function.
Args:
Returns confirmation of the concurrency setting.
{
"type": "object",
"required": [
"functionName",
"reservedConcurrency"
],
"properties": {
"functionName": {
"type": "string",
"description": "Function name"
},
"reservedConcurrency": {
"type": "integer",
"minimum": 0,
"description": "Reserved concurrent executions"
}
}
}aws_lambda_delete_function_concurrencyRemove reserved concurrency from a Lambda function.
Args:
This allows the function to use unreserved account concurrency.
Returns confirmation of removal.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_get_event_source_mappingGet details of an event source mapping.
Args:
Returns mapping details including state and batch settings.
{
"type": "object",
"required": [
"uuid"
],
"properties": {
"uuid": {
"type": "string",
"description": "Event source mapping UUID"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_lambda_create_event_source_mappingCreate an event source mapping for a Lambda function.
Args:
Returns the created mapping details.
{
"type": "object",
"required": [
"eventSourceArn",
"functionName"
],
"properties": {
"enabled": {
"type": "boolean",
"description": "Enable the mapping"
},
"batchSize": {
"type": "integer",
"minimum": 1,
"description": "Batch size"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
},
"eventSourceArn": {
"type": "string",
"description": "Event source ARN"
},
"startingPosition": {
"enum": [
"TRIM_HORIZON",
"LATEST",
"AT_TIMESTAMP"
],
"type": "string",
"description": "Starting position"
}
}
}aws_lambda_update_event_source_mappingUpdate an event source mapping.
Args:
Returns the updated mapping details.
{
"type": "object",
"required": [
"uuid"
],
"properties": {
"uuid": {
"type": "string",
"description": "Event source mapping UUID"
},
"enabled": {
"type": "boolean",
"description": "Enable/disable the mapping"
},
"batchSize": {
"type": "integer",
"minimum": 1,
"description": "Batch size"
},
"functionName": {
"type": "string",
"description": "Function name or ARN"
}
}
}aws_lambda_delete_event_source_mappingDelete an event source mapping.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"uuid"
],
"properties": {
"uuid": {
"type": "string",
"description": "Event source mapping UUID"
}
}
}aws_lambda_create_aliasCreate an alias for a Lambda function version.
Args:
Returns the created alias details.
{
"type": "object",
"required": [
"functionName",
"name",
"functionVersion"
],
"properties": {
"name": {
"type": "string",
"description": "Alias name"
},
"description": {
"type": "string",
"description": "Alias description"
},
"functionName": {
"type": "string",
"description": "Function name"
},
"functionVersion": {
"type": "string",
"description": "Function version"
}
}
}aws_lambda_update_aliasUpdate a Lambda function alias.
Args:
Returns the updated alias details.
{
"type": "object",
"required": [
"functionName",
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Alias name"
},
"description": {
"type": "string",
"description": "Alias description"
},
"functionName": {
"type": "string",
"description": "Function name"
},
"functionVersion": {
"type": "string",
"description": "Function version"
}
}
}aws_lambda_delete_aliasDelete a Lambda function alias.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"functionName",
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Alias name"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_add_permissionAdd a permission to a Lambda function's resource-based policy.
Args:
Returns the policy statement.
{
"type": "object",
"required": [
"functionName",
"statementId",
"action",
"principal"
],
"properties": {
"action": {
"type": "string",
"description": "Lambda action (e.g., lambda:InvokeFunction)"
},
"principal": {
"type": "string",
"description": "Principal (e.g., s3.amazonaws.com)"
},
"sourceArn": {
"type": "string",
"description": "Source ARN"
},
"statementId": {
"type": "string",
"description": "Statement ID"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_remove_permissionRemove a permission from a Lambda function's resource-based policy.
Args:
Returns confirmation of removal.
{
"type": "object",
"required": [
"functionName",
"statementId"
],
"properties": {
"statementId": {
"type": "string",
"description": "Statement ID"
},
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_get_policyGet the resource-based policy for a Lambda function.
Args:
Returns the function's policy document.
{
"type": "object",
"required": [
"functionName"
],
"properties": {
"functionName": {
"type": "string",
"description": "Function name"
}
}
}aws_lambda_tag_resourceAdd tags to a Lambda function.
Args:
Returns confirmation of tagging.
{
"type": "object",
"required": [
"resourceArn",
"tags"
],
"properties": {
"tags": {
"type": "object",
"description": "Tags as key-value pairs"
},
"resourceArn": {
"type": "string",
"description": "Function ARN"
}
}
}aws_lambda_untag_resourceRemove tags from a Lambda function.
Args:
Returns confirmation of tag removal.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "Function ARN"
}
}
}aws_lambda_list_tagsList tags for a Lambda function.
Args:
Returns the function's tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "Function ARN"
}
}
}aws_rds_describe_db_instancesList RDS database instances.
Args:
Returns instances with engine, class, status, and endpoint.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "Filter by DB instance ID"
}
}
}aws_rds_describe_db_clustersList RDS Aurora database clusters.
Args:
Returns clusters with engine, status, and endpoints.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbClusterIdentifier": {
"type": "string",
"description": "Filter by DB cluster ID"
}
}
}aws_rds_describe_db_snapshotsList RDS database snapshots.
Args:
Returns snapshots with type, status, and creation time.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "Filter by source DB instance"
}
}
}aws_rds_describe_db_parameter_groupsList RDS DB parameter groups.
Args:
Returns parameter groups with families and descriptions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbParameterGroupName": {
"type": "string",
"description": "Filter by parameter group name"
}
}
}aws_rds_describe_db_subnet_groupsList RDS DB subnet groups.
Args:
Returns subnet groups with VPCs and subnets.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbSubnetGroupName": {
"type": "string",
"description": "Filter by subnet group name"
}
}
}aws_rds_create_db_snapshotCreate a manual snapshot of an RDS database instance.
Args:
Returns the snapshot details.
{
"type": "object",
"required": [
"dbInstanceIdentifier",
"dbSnapshotIdentifier"
],
"properties": {
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
},
"dbSnapshotIdentifier": {
"type": "string",
"description": "Name for the snapshot"
}
}
}aws_rds_delete_db_snapshotDelete an RDS database snapshot.
Args:
WARNING: This action is irreversible.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"dbSnapshotIdentifier"
],
"properties": {
"dbSnapshotIdentifier": {
"type": "string",
"description": "Snapshot identifier"
}
}
}aws_rds_start_db_instanceStart a stopped RDS database instance.
Args:
Returns the instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier"
],
"properties": {
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
}
}
}aws_rds_stop_db_instanceStop a running RDS database instance.
Args:
Returns the instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier"
],
"properties": {
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
},
"dbSnapshotIdentifier": {
"type": "string",
"description": "Name for final snapshot"
}
}
}aws_rds_reboot_db_instanceReboot an RDS database instance.
Args:
Returns the instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier"
],
"properties": {
"forceFailover": {
"type": "boolean",
"description": "Force failover to standby"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
}
}
}aws_rds_delete_db_instanceDelete an RDS database instance.
Args:
WARNING: This action is irreversible if skipFinalSnapshot is true.
Returns the instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier"
],
"properties": {
"skipFinalSnapshot": {
"type": "boolean",
"description": "Skip final snapshot"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
},
"finalSnapshotIdentifier": {
"type": "string",
"description": "Name for final snapshot"
}
}
}aws_s3_list_bucketsList all S3 buckets in the AWS account.
Returns a list of all S3 buckets with their names and creation dates.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string",
"default": "json",
"description": "Response format"
}
}
}aws_rds_modify_db_instanceModify an RDS database instance.
Args:
Returns the instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier"
],
"properties": {
"multiAZ": {
"type": "boolean",
"description": "Enable Multi-AZ"
},
"dbInstanceClass": {
"type": "string",
"description": "Instance class (e.g., db.t3.medium)"
},
"allocatedStorage": {
"type": "integer",
"description": "Storage size in GB"
},
"applyImmediately": {
"type": "boolean",
"description": "Apply immediately"
},
"masterUserPassword": {
"type": "string",
"description": "New master password"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "DB instance identifier"
},
"backupRetentionPeriod": {
"type": "integer",
"maximum": 35,
"minimum": 0,
"description": "Backup retention days"
}
}
}aws_rds_describe_db_cluster_snapshotsList RDS Aurora cluster snapshots.
Args:
Returns cluster snapshots with type, status, and creation time.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbClusterIdentifier": {
"type": "string",
"description": "Filter by source DB cluster"
}
}
}aws_rds_create_db_cluster_snapshotCreate a manual snapshot of an RDS Aurora cluster.
Args:
Returns the snapshot details.
{
"type": "object",
"required": [
"dbClusterIdentifier",
"dbClusterSnapshotIdentifier"
],
"properties": {
"dbClusterIdentifier": {
"type": "string",
"description": "DB cluster identifier"
},
"dbClusterSnapshotIdentifier": {
"type": "string",
"description": "Name for the snapshot"
}
}
}aws_rds_delete_db_cluster_snapshotDelete an RDS Aurora cluster snapshot.
Args:
WARNING: This action is irreversible.
Returns confirmation of deletion.
{
"type": "object",
"required": [
"dbClusterSnapshotIdentifier"
],
"properties": {
"dbClusterSnapshotIdentifier": {
"type": "string",
"description": "Cluster snapshot identifier"
}
}
}aws_rds_describe_db_security_groupsList RDS DB security groups (for EC2-Classic).
Args:
Returns DB security groups with descriptions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"dbSecurityGroupName": {
"type": "string",
"description": "Filter by security group name"
}
}
}aws_rds_describe_option_groupsList RDS option groups.
Args:
Returns option groups with engines and versions.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"optionGroupName": {
"type": "string",
"description": "Filter by option group name"
}
}
}aws_rds_describe_db_engine_versionsList available RDS database engine versions.
Args:
Returns engine versions with upgrade targets.
{
"type": "object",
"properties": {
"engine": {
"type": "string",
"description": "Filter by engine name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_rds_describe_orderable_db_instance_optionsList available DB instance options for an engine.
Args:
Returns available instance classes and configurations.
{
"type": "object",
"required": [
"engine"
],
"properties": {
"engine": {
"type": "string",
"description": "DB engine name (e.g., mysql, postgres)"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_rds_describe_eventsList RDS events.
Args:
Returns recent RDS events.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"duration": {
"type": "integer",
"description": "Duration in minutes"
},
"sourceType": {
"type": "string",
"description": "Source type filter"
},
"sourceIdentifier": {
"type": "string",
"description": "Source identifier filter"
}
}
}aws_rds_describe_pending_maintenance_actionsList pending maintenance actions for RDS resources.
Args:
Returns pending maintenance actions with details.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceIdentifier": {
"type": "string",
"description": "Resource ARN filter"
}
}
}aws_rds_add_tags_to_resourceAdd tags to an RDS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "RDS resource ARN"
}
}
}aws_rds_remove_tags_from_resourceRemove tags from an RDS resource.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "RDS resource ARN"
}
}
}aws_rds_list_tags_for_resourceList tags on an RDS resource.
Args:
Returns the resource tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceArn": {
"type": "string",
"description": "RDS resource ARN"
}
}
}aws_rds_restore_db_instance_from_db_snapshotRestore an RDS instance from a snapshot.
Args:
Returns the new instance details.
{
"type": "object",
"required": [
"dbInstanceIdentifier",
"dbSnapshotIdentifier"
],
"properties": {
"dbInstanceClass": {
"type": "string",
"description": "Instance class"
},
"dbInstanceIdentifier": {
"type": "string",
"description": "New DB instance identifier"
},
"dbSnapshotIdentifier": {
"type": "string",
"description": "Source snapshot identifier"
}
}
}aws_rds_copy_db_snapshotCopy an RDS database snapshot.
Args:
Returns the new snapshot details.
{
"type": "object",
"required": [
"sourceSnapshotIdentifier",
"targetSnapshotIdentifier"
],
"properties": {
"sourceSnapshotIdentifier": {
"type": "string",
"description": "Source snapshot identifier"
},
"targetSnapshotIdentifier": {
"type": "string",
"description": "Target snapshot name"
}
}
}aws_route53_list_hosted_zonesList all Route53 hosted zones.
Returns zones with names, IDs, and record counts.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_route53_list_record_setsList DNS record sets in a hosted zone.
Args:
Returns DNS records with names, types, and values.
{
"type": "object",
"required": [
"hostedZoneId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"hostedZoneId": {
"type": "string",
"description": "Hosted zone ID"
}
}
}aws_route53_change_record_setsCreate, update, or delete DNS record sets in a hosted zone.
Args:
Each change requires:
Returns change status and ID.
{
"type": "object",
"required": [
"hostedZoneId"
],
"properties": {
"hostedZoneId": {
"type": "string",
"description": "Hosted zone ID"
}
}
}aws_route53_list_health_checksList Route53 health checks.
Returns health checks with their configurations and endpoints.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_route53_get_hosted_zoneGet detailed information about a Route53 hosted zone.
Args:
Returns zone details including name, configuration, and record count.
{
"type": "object",
"required": [
"hostedZoneId"
],
"properties": {
"hostedZoneId": {
"type": "string",
"description": "Hosted zone ID"
}
}
}aws_route53_create_hosted_zoneCreate a new Route53 hosted zone.
Args:
Returns the created zone and change info.
{
"type": "object",
"required": [
"name",
"callerReference"
],
"properties": {
"name": {
"type": "string",
"description": "Domain name (end with .)"
},
"vpcId": {
"type": "string",
"description": "VPC ID for private zone"
},
"comment": {
"type": "string",
"description": "Zone comment"
},
"vpcRegion": {
"type": "string",
"description": "VPC region for private zone"
},
"privateZone": {
"type": "boolean",
"description": "Create as private zone"
},
"callerReference": {
"type": "string",
"description": "Unique request identifier"
}
}
}aws_route53_delete_hosted_zoneDelete a Route53 hosted zone.
Args:
Note: The zone must not have any non-NS/SOA records. Returns change status.
{
"type": "object",
"required": [
"hostedZoneId"
],
"properties": {
"hostedZoneId": {
"type": "string",
"description": "Hosted zone ID to delete"
}
}
}aws_route53_get_health_checkGet detailed information about a Route53 health check.
Args:
Returns health check configuration and status.
{
"type": "object",
"required": [
"healthCheckId"
],
"properties": {
"healthCheckId": {
"type": "string",
"description": "Health check ID"
}
}
}aws_route53_create_health_checkCreate a Route53 health check.
Args:
Returns the created health check.
{
"type": "object",
"required": [
"callerReference",
"type"
],
"properties": {
"port": {
"type": "integer",
"description": "Port number"
},
"type": {
"type": "string",
"description": "Health check type (HTTP, HTTPS, TCP, etc.)"
},
"ipAddress": {
"type": "string",
"description": "IP address to check"
},
"resourcePath": {
"type": "string",
"description": "Path for HTTP/HTTPS checks"
},
"callerReference": {
"type": "string",
"description": "Unique request identifier"
},
"requestInterval": {
"type": "integer",
"description": "Seconds between checks (10 or 30)"
},
"failureThreshold": {
"type": "integer",
"maximum": 10,
"minimum": 1,
"description": "Failures before unhealthy"
},
"fullyQualifiedDomainName": {
"type": "string",
"description": "Domain name to check"
}
}
}aws_route53_delete_health_checkDelete a Route53 health check.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"healthCheckId"
],
"properties": {
"healthCheckId": {
"type": "string",
"description": "Health check ID to delete"
}
}
}aws_s3_list_objectsList objects in an S3 bucket.
Args:
Returns paginated list of objects with keys, sizes, and metadata.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"prefix": {
"type": "string",
"description": "Filter objects by prefix"
},
"maxKeys": {
"type": "integer",
"default": 100,
"maximum": 1000,
"minimum": 1,
"description": "Maximum keys to return"
},
"delimiter": {
"type": "string",
"description": "Delimiter for grouping (e.g., '/"
},
"continuationToken": {
"type": "string",
"description": "Pagination token"
}
}
}aws_s3_get_objectGet the contents of an S3 object.
Args:
Returns the object contents as text. Best for text files, JSON, etc. For binary files, consider using presigned URLs instead.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key (path)"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_put_objectUpload an object to S3.
Args:
Returns confirmation with the object's ETag.
{
"type": "object",
"required": [
"bucket",
"key",
"body"
],
"properties": {
"key": {
"type": "string",
"description": "Object key (path)"
},
"body": {
"type": "string",
"description": "Content to upload"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"contentType": {
"type": "string",
"description": "MIME type of the content"
}
}
}aws_s3_delete_objectDelete an object from S3.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key to delete"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_copy_objectCopy an object within or between S3 buckets.
Args:
Returns confirmation of the copy operation.
{
"type": "object",
"required": [
"sourceBucket",
"sourceKey",
"destinationBucket",
"destinationKey"
],
"properties": {
"sourceKey": {
"type": "string",
"description": "Source object key"
},
"sourceBucket": {
"type": "string",
"description": "Source bucket name"
},
"destinationKey": {
"type": "string",
"description": "Destination object key"
},
"destinationBucket": {
"type": "string",
"description": "Destination bucket name"
}
}
}aws_s3_get_bucket_locationGet the AWS region where an S3 bucket is located.
Args:
Returns the region name (e.g., 'us-east-1', 'eu-west-1').
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_head_objectGet metadata about an S3 object without downloading it.
Args:
Returns object metadata including size, content type, and last modified date.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key (path)"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_delete_objectsDelete multiple objects from S3 in a single request.
Args:
Returns list of deleted keys and any errors.
{
"type": "object",
"required": [
"bucket",
"keys"
],
"properties": {
"keys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Object keys to delete"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_versioningGet the versioning configuration for an S3 bucket.
Args:
Returns versioning status ('Enabled', 'Suspended', or not set).
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_create_bucketCreate a new S3 bucket.
Args:
Returns confirmation of bucket creation.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"region": {
"type": "string",
"description": "AWS region for the bucket"
}
}
}aws_s3_delete_bucketDelete an S3 bucket.
Args:
Note: The bucket must be empty before it can be deleted. Returns confirmation of bucket deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_policyGet the bucket policy for an S3 bucket.
Args:
Returns the bucket policy as a JSON string.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_put_bucket_policySet the bucket policy for an S3 bucket.
Args:
Returns confirmation of policy update.
{
"type": "object",
"required": [
"bucket",
"policy"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"policy": {
"type": "string",
"description": "Bucket policy as JSON string"
}
}
}aws_s3_delete_bucket_policyDelete the bucket policy for an S3 bucket.
Args:
Returns confirmation of policy deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_corsGet the CORS configuration for an S3 bucket.
Args:
Returns the CORS rules configured for the bucket.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_put_bucket_corsSet the CORS configuration for an S3 bucket.
Args:
Each rule can include:
Returns confirmation of CORS configuration update.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_delete_bucket_corsDelete the CORS configuration for an S3 bucket.
Args:
Returns confirmation of CORS configuration deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_taggingGet the tags for an S3 bucket.
Args:
Returns the tags configured for the bucket.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_put_bucket_taggingSet tags for an S3 bucket.
Args:
Returns confirmation of tagging update.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_delete_bucket_taggingDelete all tags from an S3 bucket.
Args:
Returns confirmation of tagging deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_put_bucket_versioningEnable or suspend versioning for an S3 bucket.
Args:
Returns confirmation of versioning configuration update.
{
"type": "object",
"required": [
"bucket",
"status"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"status": {
"enum": [
"Enabled",
"Suspended"
],
"type": "string",
"description": "Versioning status"
}
}
}aws_s3_get_bucket_lifecycle_configurationGet the lifecycle configuration for an S3 bucket.
Args:
Returns lifecycle rules including expiration and transition settings.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_put_bucket_lifecycle_configurationSet the lifecycle configuration for an S3 bucket.
Args:
Each rule can include:
Returns confirmation of lifecycle configuration update.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_delete_bucket_lifecycle_configurationDelete the lifecycle configuration for an S3 bucket.
Args:
Returns confirmation of lifecycle configuration deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_encryptionGet the server-side encryption configuration for an S3 bucket.
Args:
Returns encryption rules including SSE algorithm and KMS key.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_put_bucket_encryptionSet the server-side encryption configuration for an S3 bucket.
Args:
Returns confirmation of encryption configuration update.
{
"type": "object",
"required": [
"bucket",
"sseAlgorithm"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"sseAlgorithm": {
"enum": [
"AES256",
"aws:kms"
],
"type": "string",
"description": "Server-side encryption algorithm"
},
"kmsMasterKeyId": {
"type": "string",
"description": "KMS key ID or ARN (for aws:kms)"
}
}
}aws_s3_delete_bucket_encryptionDelete the server-side encryption configuration for an S3 bucket.
Args:
Returns confirmation of encryption configuration deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_websiteGet the static website configuration for an S3 bucket.
Args:
Returns website configuration including index and error documents.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_sns_get_subscription_attributesGet attributes of an SNS subscription.
Args:
Returns subscription attributes including delivery policy and filter policy.
{
"type": "object",
"required": [
"subscriptionArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"subscriptionArn": {
"type": "string",
"description": "Subscription ARN"
}
}
}aws_s3_put_bucket_websiteConfigure an S3 bucket for static website hosting.
Args:
Returns confirmation of website configuration update.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"errorDocument": {
"type": "string",
"description": "Error document key (e.g., error.html)"
},
"indexDocument": {
"type": "string",
"description": "Index document suffix (e.g., index.html)"
}
}
}aws_s3_delete_bucket_websiteDelete the static website configuration for an S3 bucket.
Args:
Returns confirmation of website configuration deletion.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_object_taggingGet the tags for an S3 object.
Args:
Returns the tags configured for the object.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_put_object_taggingSet tags for an S3 object.
Args:
Returns confirmation of tagging update.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_delete_object_taggingDelete all tags from an S3 object.
Args:
Returns confirmation of tagging deletion.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
}
}
}aws_s3_get_bucket_aclGet the access control list (ACL) for a bucket.
Args:
Returns the bucket owner and grants.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_get_object_aclGet the access control list (ACL) for an object.
Args:
Returns the object owner and grants.
{
"type": "object",
"required": [
"bucket",
"key"
],
"properties": {
"key": {
"type": "string",
"description": "Object key"
},
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_list_object_versionsList object versions in a versioning-enabled bucket.
Args:
Returns versions and delete markers.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"prefix": {
"type": "string",
"description": "Object key prefix"
}
}
}aws_s3_get_bucket_loggingGet the logging configuration for a bucket.
Args:
Returns the logging target bucket and prefix.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_s3_put_bucket_loggingEnable access logging for a bucket.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"bucket",
"targetBucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"targetBucket": {
"type": "string",
"description": "Target bucket for logs"
},
"targetPrefix": {
"type": "string",
"description": "Log file prefix"
}
}
}aws_s3_get_bucket_notification_configurationGet the notification configuration for a bucket.
Args:
Returns Lambda, SQS, and SNS notification configurations.
{
"type": "object",
"required": [
"bucket"
],
"properties": {
"bucket": {
"type": "string",
"description": "S3 bucket name"
},
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_secrets_list_secretsList all secrets in Secrets Manager.
Returns secret metadata (not values). Use get_secret_value to retrieve values.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_secrets_get_secret_valueGet the value of a secret from Secrets Manager.
Args:
Returns the secret value (string or binary). WARNING: This returns sensitive data. Handle with care.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_describe_secretGet metadata about a secret (without the value).
Args:
Returns secret metadata including rotation status and tags.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_create_secretCreate a new secret in Secrets Manager.
Args:
Returns the created secret ARN and name.
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Secret name"
},
"tags": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tags"
},
"kmsKeyId": {
"type": "string",
"description": "KMS key ID"
},
"description": {
"type": "string",
"description": "Description"
},
"secretString": {
"type": "string",
"description": "Secret value (string)"
}
}
}aws_secrets_update_secretUpdate the value of an existing secret.
Args:
Returns the updated secret ARN and version ID.
{
"type": "object",
"required": [
"secretId",
"secretString"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"secretString": {
"type": "string",
"description": "New secret value"
}
}
}aws_secrets_delete_secretDelete a secret from Secrets Manager.
By default, secrets are scheduled for deletion after a recovery window. Use forceDeleteWithoutRecovery to delete immediately (cannot be undone).
Args:
Returns deletion confirmation with scheduled deletion date.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"forceDeleteWithoutRecovery": {
"type": "boolean",
"default": false,
"description": "Force immediate deletion"
}
}
}aws_secrets_restore_secretRestore a previously deleted secret that is scheduled for deletion.
Args:
Returns the restored secret ARN and name. Note: Only works for secrets that are scheduled for deletion, not immediately deleted.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_sqs_list_dead_letter_source_queuesList queues that have this queue configured as their dead-letter queue.
Args:
Returns URLs of source queues that send failed messages to this DLQ.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"queueUrl": {
"type": "string",
"description": "Dead-letter queue URL"
}
}
}aws_secrets_rotate_secretTrigger immediate rotation of a secret.
Args:
Returns the rotated secret ARN, name, and new version ID. Note: Requires rotation to be configured on the secret.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"rotationLambdaARN": {
"type": "string",
"description": "Lambda ARN for rotation"
}
}
}aws_secrets_put_secret_valueStore a new secret value for an existing secret.
Creates a new version of the secret with the provided value. Unlike update_secret, this does not modify the secret's metadata.
Args:
Returns the secret ARN, name, and version ID of the new version.
{
"type": "object",
"required": [
"secretId",
"secretString"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"secretString": {
"type": "string",
"description": "New secret value"
},
"versionStages": {
"type": "array",
"items": {
"type": "string"
},
"description": "Version stages"
}
}
}aws_secrets_tag_resourceAdd or update tags on a secret.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_untag_resourceRemove tags from a secret.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"secretId",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_get_resource_policyGet the resource-based policy attached to a secret.
Args:
Returns the policy JSON if one is attached.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_put_resource_policyAttach a resource-based policy to a secret.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"secretId",
"resourcePolicy"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"resourcePolicy": {
"type": "string",
"description": "Policy document JSON"
}
}
}aws_secrets_delete_resource_policyDelete the resource-based policy from a secret.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_cancel_rotate_secretCancel an in-progress rotation for a secret.
Args:
Returns confirmation.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_list_secret_version_idsList all versions of a secret.
Args:
Returns version IDs, stages, and creation dates.
{
"type": "object",
"required": [
"secretId"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"secretId": {
"type": "string",
"description": "Secret name or ARN"
}
}
}aws_secrets_update_secret_version_stageMove a staging label to a different version of a secret.
Args:
Use this to promote a version to AWSCURRENT or manage custom labels.
Returns confirmation.
{
"type": "object",
"required": [
"secretId",
"versionStage"
],
"properties": {
"secretId": {
"type": "string",
"description": "Secret name or ARN"
},
"versionStage": {
"type": "string",
"description": "Staging label to move"
},
"moveToVersionId": {
"type": "string",
"description": "Move label to this version"
},
"removeFromVersionId": {
"type": "string",
"description": "Remove label from this version"
}
}
}aws_sns_list_topicsList all SNS topics in the region.
Returns topic ARNs.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_sns_list_subscriptionsList SNS subscriptions.
Args:
Returns subscriptions with endpoints and protocols.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"topicArn": {
"type": "string",
"description": "Filter by topic ARN"
}
}
}aws_sns_publishPublish a message to an SNS topic or endpoint.
Args:
Returns the message ID.
{
"type": "object",
"required": [
"message"
],
"properties": {
"message": {
"type": "string",
"description": "Message content"
},
"subject": {
"type": "string",
"description": "Subject (for email)"
},
"topicArn": {
"type": "string",
"description": "Topic ARN"
},
"targetArn": {
"type": "string",
"description": "Target ARN (alternative to topic)"
}
}
}aws_sns_get_topic_attributesGet attributes of an SNS topic.
Args:
Returns topic configuration including subscriptions and delivery policy.
{
"type": "object",
"required": [
"topicArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"topicArn": {
"type": "string",
"description": "Topic ARN"
}
}
}aws_sns_subscribeSubscribe an endpoint to an SNS topic.
Args:
Returns the subscription ARN (or 'pending confirmation' for email).
{
"type": "object",
"required": [
"topicArn",
"protocol",
"endpoint"
],
"properties": {
"endpoint": {
"type": "string",
"description": "Endpoint (varies by protocol)"
},
"protocol": {
"enum": [
"email",
"email-json",
"sms",
"sqs",
"lambda",
"http",
"https",
"application"
],
"type": "string",
"description": "Protocol"
},
"topicArn": {
"type": "string",
"description": "Topic ARN"
}
}
}aws_sns_create_topicCreate a new SNS topic.
Args:
Returns the new topic ARN.
{
"type": "object",
"properties": {
"name": {
"type": "string",
"description": "Topic name (end with .fifo for FIFO topics)"
}
}
}aws_sns_delete_topicDelete an SNS topic.
WARNING: This action cannot be undone.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"topicArn"
],
"properties": {
"topicArn": {
"type": "string",
"description": "Topic ARN"
}
}
}aws_sns_unsubscribeUnsubscribe an endpoint from an SNS topic.
Args:
Returns confirmation of unsubscription.
{
"type": "object",
"required": [
"subscriptionArn"
],
"properties": {
"subscriptionArn": {
"type": "string",
"description": "Subscription ARN"
}
}
}aws_sns_set_topic_attributesSet an attribute on an SNS topic.
Args:
Supported attributes:
Returns confirmation of update.
{
"type": "object",
"required": [
"topicArn",
"attributeName",
"attributeValue"
],
"properties": {
"topicArn": {
"type": "string",
"description": "Topic ARN"
},
"attributeName": {
"type": "string",
"description": "Attribute name"
},
"attributeValue": {
"type": "string",
"description": "Attribute value"
}
}
}aws_sns_tag_resourceAdd or update tags on an SNS resource (topic or subscription).
Args:
Returns confirmation of tagging.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"resourceArn": {
"type": "string",
"description": "Resource ARN (topic or subscription)"
}
}
}aws_sns_list_tags_for_resourceList tags on an SNS resource (topic or subscription).
Args:
Returns the resource tags.
{
"type": "object",
"required": [
"resourceArn"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"resourceArn": {
"type": "string",
"description": "Resource ARN"
}
}
}aws_sns_confirm_subscriptionConfirm a pending subscription using the token from the confirmation message.
Args:
Returns the confirmed subscription ARN.
{
"type": "object",
"required": [
"topicArn",
"token"
],
"properties": {
"token": {
"type": "string",
"description": "Confirmation token"
},
"topicArn": {
"type": "string",
"description": "Topic ARN"
}
}
}aws_sns_set_subscription_attributesSet an attribute on an SNS subscription.
Args:
Supported attributes:
Returns confirmation of update.
{
"type": "object",
"required": [
"subscriptionArn",
"attributeName",
"attributeValue"
],
"properties": {
"attributeName": {
"type": "string",
"description": "Attribute name"
},
"attributeValue": {
"type": "string",
"description": "Attribute value"
},
"subscriptionArn": {
"type": "string",
"description": "Subscription ARN"
}
}
}aws_sns_untag_resourceRemove tags from an SNS resource (topic or subscription).
Args:
Returns confirmation of untagging.
{
"type": "object",
"required": [
"resourceArn",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"resourceArn": {
"type": "string",
"description": "Resource ARN"
}
}
}aws_sns_publish_batchPublish multiple messages to an SNS topic in a single request.
Args:
Returns successful and failed message results.
{
"type": "object",
"required": [
"topicArn"
],
"properties": {
"topicArn": {
"type": "string",
"description": "Topic ARN"
}
}
}aws_sqs_list_queuesList all SQS queues in the region.
Returns queue URLs. Use get_queue_attributes for details.
{
"type": "object",
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
}
}
}aws_sqs_get_queue_attributesGet attributes of an SQS queue.
Args:
Returns queue configuration and message counts.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_send_messageSend a message to an SQS queue.
Args:
Returns the message ID.
{
"type": "object",
"required": [
"queueUrl",
"messageBody"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
},
"messageBody": {
"type": "string",
"description": "Message content"
},
"delaySeconds": {
"type": "integer",
"maximum": 900,
"minimum": 0,
"description": "Delay in seconds"
}
}
}aws_sts_get_caller_identityGet details about the IAM user or role whose credentials are used to call the operation.
Returns the AWS account ID, IAM user/role ARN, and unique identifier.
{
"type": "object",
"properties": {}
}aws_sqs_receive_messagesReceive messages from an SQS queue.
Args:
Returns messages with bodies and receipt handles. IMPORTANT: Messages must be deleted after processing.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"format": {
"enum": [
"json",
"markdown"
],
"type": "string"
},
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
},
"waitTimeSeconds": {
"type": "integer",
"default": 0,
"maximum": 20,
"minimum": 0,
"description": "Long poll timeout"
},
"visibilityTimeout": {
"type": "integer",
"description": "Visibility timeout (seconds)"
},
"maxNumberOfMessages": {
"type": "integer",
"default": 1,
"maximum": 10,
"minimum": 1,
"description": "Max messages"
}
}
}aws_sqs_delete_messageDelete a message from an SQS queue.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"queueUrl",
"receiptHandle"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
},
"receiptHandle": {
"type": "string",
"description": "Receipt handle from receive"
}
}
}aws_sqs_purge_queueDelete all messages from an SQS queue.
WARNING: This action cannot be undone.
Args:
Returns confirmation of the purge.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_create_queueCreate a new SQS queue.
Args:
Returns the new queue URL.
{
"type": "object",
"properties": {
"queueName": {
"type": "string",
"description": "Queue name (end with .fifo for FIFO queues)"
}
}
}aws_sqs_delete_queueDelete an SQS queue.
WARNING: This action cannot be undone. All messages in the queue will be deleted.
Args:
Returns confirmation of deletion.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_get_queue_urlGet the URL of an SQS queue by its name.
Args:
Returns the queue URL.
{
"type": "object",
"required": [
"queueName"
],
"properties": {
"queueName": {
"type": "string",
"description": "Queue name"
}
}
}aws_sqs_set_queue_attributesSet attributes on an SQS queue.
Args:
Supported attributes:
Returns confirmation of update.
{
"type": "object",
"required": [
"queueUrl",
"attributes"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
},
"attributes": {
"type": "object",
"description": "Attributes to set"
}
}
}aws_sqs_tag_queueAdd or update tags on an SQS queue.
Args:
Returns confirmation of tagging.
{
"type": "object",
"required": [
"queueUrl",
"tags"
],
"properties": {
"tags": {
"type": "object",
"description": "Tags to add"
},
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_list_queue_tagsList tags on an SQS queue.
Args:
Returns the queue tags.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_untag_queueRemove tags from an SQS queue.
Args:
Returns confirmation of untagging.
{
"type": "object",
"required": [
"queueUrl",
"tagKeys"
],
"properties": {
"tagKeys": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tag keys to remove"
},
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_send_message_batchSend multiple messages to an SQS queue in a single request.
Args:
Returns successful and failed message results.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_delete_message_batchDelete multiple messages from an SQS queue in a single request.
Args:
Returns successful and failed delete results.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sqs_change_message_visibilityChange the visibility timeout of a message.
Args:
Use this to extend processing time or make a message immediately visible again.
Returns confirmation.
{
"type": "object",
"required": [
"queueUrl",
"receiptHandle",
"visibilityTimeout"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
},
"receiptHandle": {
"type": "string",
"description": "Receipt handle"
},
"visibilityTimeout": {
"type": "integer",
"maximum": 43200,
"minimum": 0,
"description": "Visibility timeout in seconds"
}
}
}aws_sqs_change_message_visibility_batchChange visibility timeout for multiple messages in a single request.
Args:
Returns successful and failed results.
{
"type": "object",
"required": [
"queueUrl"
],
"properties": {
"queueUrl": {
"type": "string",
"description": "SQS queue URL"
}
}
}aws_sts_assume_roleAssume an IAM role and get temporary security credentials.
Args:
Returns temporary credentials including access key, secret key, and session token.
{
"type": "object",
"required": [
"roleArn",
"roleSessionName"
],
"properties": {
"roleArn": {
"type": "string",
"description": "ARN of the role to assume"
},
"externalId": {
"type": "string",
"description": "External ID for cross-account access"
},
"durationSeconds": {
"type": "integer",
"maximum": 43200,
"minimum": 900,
"description": "Session duration in seconds"
},
"roleSessionName": {
"type": "string",
"description": "Identifier for the session"
}
}
}aws_sts_get_session_tokenGet temporary security credentials for an IAM user.
Args:
This is useful for MFA-protected API access. The credentials can be used to call AWS APIs.
Returns temporary credentials including access key, secret key, and session token.
{
"type": "object",
"properties": {
"durationSeconds": {
"type": "integer",
"maximum": 129600,
"minimum": 900,
"description": "Session duration in seconds"
}
}
}aws_sts_get_federation_tokenGet temporary security credentials for a federated user.
Args:
This returns credentials with permissions that are the intersection of the IAM user's permissions and the policy you specify.
Returns temporary credentials and federated user info.
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "Name of the federated user"
},
"policy": {
"type": "string",
"description": "IAM policy in JSON format"
},
"durationSeconds": {
"type": "integer",
"maximum": 129600,
"minimum": 900,
"description": "Session duration in seconds"
}
}
}aws_sts_decode_authorization_messageDecode an encoded authorization failure message.
Args:
When an AWS API call fails due to authorization, AWS sometimes returns an encoded message. This operation decodes that message to show the details of what failed.
Returns the decoded authorization message as JSON.
{
"type": "object",
"required": [
"encodedMessage"
],
"properties": {
"encodedMessage": {
"type": "string",
"description": "The encoded authorization failure message"
}
}
}