AM

aashari/mcp-server-aws-sso

开发工具

本页由 AI 翻译,技术细节请以原文为准。 查看原文

15 stars 13 forks 质量 65 趋势 21

Node.js/TypeScript MCP server for AWS Single Sign-On (SSO). Enables AI systems (LLMs) with tools to initiate SSO login (device auth flow), list accounts/roles, and securely execute AWS CLI commands...

概览

Transform how you manage and access your AWS infrastructure by connecting Claude, Cursor AI, and other AI assistants directly to your AWS accounts through AWS IAM Identity Center (formerly AWS SSO). Get instant access to your cloud resources, execute commands, and manage EC2 instances using natural language. ✅ : "Show me all my AWS accounts and available roles" ✅ : "List all S3 buckets in my production account" ✅ : "Check the disk usage on server i-123456789" ✅ : "Switch to the staging account and describe the VPCs" ✅ : "Get the status of all running EC2 instances" ✅ : "Execute 'df -h' on my web server via SSM" - managing multi-account AWS environments and infrastructure automation - needing quick access to resource information across AWS accounts - who want to check deployments and run AWS CLI commands through AI - monitoring and troubleshooting AWS resources using natural language - managing EC2 instances and executing remote commands securely - who wants to interact with AWS...

README

以下为原文 README 节选,完整内容请查看原文。

Connect AI to Your AWS Resources

Transform how you manage and access your AWS infrastructure by connecting Claude, Cursor AI, and other AI assistants directly to your AWS accounts through AWS IAM Identity Center (formerly AWS SSO). Get instant access to your cloud resources, execute commands, and manage EC2 instances using natural language.

What You Can Do

✅ Ask AI about your AWS accounts: “Show me all my AWS accounts and available roles”
✅ Execute AWS commands: “List all S3 buckets in my production account”
✅ Manage EC2 instances: “Check the disk usage on server i-123456789”
✅ Access multi-account setups: “Switch to the staging account and describe the VPCs”
✅ Monitor resources: “Get the status of all running EC2 instances”
✅ Run shell commands: “Execute ‘df -h’ on my web server via SSM”

Perfect For

  • DevOps Engineers managing multi-account AWS environments and infrastructure automation
  • Cloud Architects needing quick access to resource information across AWS accounts
  • Developers who want to check deployments and run AWS CLI commands through AI
  • SRE Teams monitoring and troubleshooting AWS resources using natural language
  • IT Administrators managing EC2 instances and executing remote commands securely
  • Anyone who wants to interact with AWS using conversational AI

Quick Start

Get up and running in 2 minutes:

1. Get Your AWS SSO Setup

Set up AWS IAM Identity Center:

  1. Enable AWS IAM Identity Center in your AWS account
  2. Configure your identity source (AWS directory, Active Directory, or external IdP)
  3. Set up permission sets and assign users to AWS accounts
  4. Note your AWS SSO Start URL (e.g., https://your-company.awsapps.com/start)

2. Try It Instantly

# Set your AWS SSO configuration
export AWS_SSO_START_URL="https://your-company.awsapps.com/start"
export AWS_REGION="us-east-1"

# Start the authentication flow
npx -y @aashari/mcp-server-aws-sso login

# List your accessible accounts and roles
npx -y @aashari/mcp-server-aws-sso ls-accounts

# Execute an AWS command
npx -y @aashari/mcp-server-aws-sso exec-command \
  --account-id 123456789012 \
  --role-name ReadOnly \
  --command "aws s3 ls"

Connect to AI Assistants

For Claude Desktop Users

Add this to your Claude configuration file (~/.claude/claude_desktop_config.json):

{
  "mcpServers": {
    "aws-sso": {
      "command": "npx",
      "args": ["-y", "@aashari/mcp-server-aws-sso"],
      "env": {
        "AWS_SSO_START_URL": "https://your-company.awsapps.com/start",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}
在 GitHub 查看完整 README

安装

npx -y @aashari/mcp-server-aws-sso
新手?先看 mcpskill.org 教程 →

配置

{ "mcpServers": { "aws-sso": { "command": "npx", "args": ["-y", "@aashari/mcp-server-aws-sso"], "env": { "AWS_SSO_START_URL": "https://your-company.awsapps.com/start", "AWS_REGION": "us-east-1" } } } }