aws-security-mcp

概述

AWS Security MCP 使 Claude 等 AI 助手能够通过自然语言查询执行全面的 AWS 安全分析。它弥合了 AI 功能与 AWS 安全服务之间的差距，允许自动发现和分析多个 AWS 账户中的资源。该系统集成了 GuardDuty、SecurityHub 和 Access Analyzer 的发现结果，同时提供基础设施映射和 Athena 支持的日志分析功能。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• query_aws_resources

  Query AWS resources across multiple services including EC2, S3, IAM, Lambda, and GuardDuty

  试试:Show me all running EC2 instances in my account试试:List all S3 buckets with public access试试:Find IAM roles with administrative privileges
• analyze_security_findings

  Analyze security findings from GuardDuty and SecurityHub

  试试:Show me all GuardDuty findings from the last 7 days试试:What is my current SecurityHub compliance score?试试:List high-risk security findings across all accounts
• cross_account_analysis

  Perform security analysis across multiple AWS accounts

  试试:List all connected AWS accounts试试:Find resources tagged Team:Security across all accounts试试:Show compliance status across organization
• blast_radius_analysis

  Generate blast radius analysis for AWS resources

  试试:Generate blast radius analysis for IP 172.16.1.10试试:What resources would be affected if this security group is deleted?试试:Show network blast radius for this EC2 instance
• athena_log_analysis

  Analyze AWS logs using Athena including CloudTrail and VPC Flow Logs

  试试:Show all failed login attempts from external IPs in the last 24 hours试试:What did 'saransh.rana@company.com' do in past 24 hours?试试:Correlate GuardDuty findings with CloudTrail events
• network_topology_analysis

  Analyze network topology including VPCs, security groups, and load balancers

  试试:Share network map for resource 172.22.141.11试试:Show all security groups attached to this EC2 instance试试:Analyze ALB configuration for security vulnerabilities
• refresh_aws_session

  Refresh AWS session credentials for cross-account access

  试试:Refresh my AWS session试试:Update cross-account credentials试试:Reconnect to all organization accounts
• security_compliance_check

  Check security compliance against AWS standards and frameworks

  试试:Check my PCI compliance status试试:Generate SecurityHub compliance report试试:Show all non-compliant resources
• analyze_lambda_security

  Analyze Lambda functions for security vulnerabilities

  试试:Show secrets stored in environment variables of Lambda functions试试:List Lambda functions with overly permissive IAM roles试试:Check for public access to Lambda functions
• s3_security_analysis

  Analyze S3 buckets for security misconfigurations

  试试:Check for publicly accessible S3 buckets试试:List all S3 buckets with public access blocks disabled试试:Show encryption settings for all S3 buckets
• access_analyzer_check

  Use IAM Access Analyzer to check for potentially unauthorized access

  试试:Check for IAM roles with external access试试:Find resources shared with external principals试试:Analyze public access to my IAM resources
• generate_security_report

  Generate comprehensive security reports across AWS infrastructure

  试试:Generate a security summary for all resources试试:Create a compliance report for my organization试试:Export all security findings to a formatted report

说明：Tools were inferred from usage examples and service descriptions rather than a dedicated tools section. The README doesn't provide explicit tool names or parameters, but rather shows how users can interact with the system through natural la

可对比工具

安装

FAQ

需要哪些 AWS 权限？

服务器需要 SecurityAudit 策略和用于跨账户访问的 STS AssumeRole 权限。Athena 权限是可选的，用于日志分析功能。

它可以与非 Claude MCP 客户端一起使用吗？

是的，它应该支持 SSE 连接的任何 MCP 客户端，如 Cline。mcp-proxy 组件有助于建立连接。

aws-security-mcp 对比