A Model Context Protocol (MCP) server that enables AI-assisted management of Landing Zone Accelerator on AWS (LZA) deployments through compatible development tools and IDEs.
概览
A Model Context Protocol (MCP) server that enables AI-assisted management of Landing Zone Accelerator on AWS (LZA) deployments through compatible development tools and IDEs. The LZA MCP Server streamlines Landing Zone Accelerator on AWS operations by providing AI-powered assistance for configuration management, pipeline orchestration, and schema discovery. Organizations can reduce operational complexity and accelerate deployment cycles while maintaining security and compliance standards. The server includes specialized tools for merging LZA Universal Configuration templates, enabling rapid deployment of enterprise-ready, compliance-focused baseline environments.
README
以下为原文 README 节选，完整内容请查看原文。
Landing Zone Accelerator on AWS (LZA) MCP Server
A Model Context Protocol (MCP) server that enables AI-assisted management of Landing Zone Accelerator on AWS (LZA) deployments through compatible development tools and IDEs.
Documentation: Contributing | Code of Conduct | Security | Changelog | License
Table of Contents
- Overview
- Privacy Notice
- Quick Start
- Build Process
- AWS Permissions
- MCP Client Configuration
- Kiro IDE: Configuration Validation Hook
- Available Tools
- Schema Management
- Universal Configuration
- Configuration Operations
- Pipeline Management
- Advanced Topics
- Troubleshooting
Overview
The LZA MCP Server streamlines Landing Zone Accelerator on AWS operations by providing AI-powered assistance for configuration management, pipeline orchestration, and schema discovery. Organizations can reduce operational complexity and accelerate deployment cycles while maintaining security and compliance standards. The server includes specialized tools for merging LZA Universal Configuration templates, enabling rapid deployment of enterprise-ready, compliance-focused baseline environments.
Key Benefits:
- Accelerated Operations: AI-assisted configuration reduces manual effort and deployment time
- Enhanced Accuracy: Schema validation and intelligent search helping prevent configuration errors while providing a reliable tools to discover LZA capabilities
- Operational Visibility: Real-time pipeline monitoring with automated diagnostics
- Security by Design: Comprehensive input validation and least-privilege IAM policies
- Universal Configuration Integration: Streamlined merging of enterprise-ready compliance templates
Architecture: The server operates as a containerized MCP endpoint, invoked by compatible IDEs (Kiro, Claude Desktop) via stdio transport. All AWS operations use temporary credentials following AWS security best practices.
Privacy Notice
⚠️ Data Sharing with AI Providers
安装
docker exec CONTAINER_ID date -u配置
{
"mcpServers": {
"awslabs.lza-mcp-server": {
"command": "<REPO_PATH>/scripts/extract-aws-credentials.sh",
"args": [
"docker", "run",
"--security-opt=no-new-privileges:true",
"--cap-drop=ALL",
"--read-only",
"--tmpfs", "/tmp:rw,noexec,nosuid,size=200m",
"--rm", "-i",
"-v", "<CONFIG_PATH>:/app/lza-config:rw",
"-e", "LZA_CONFIG_HOST_PATH=<CONFIG_PATH>",
"-e", "AWS_ACCESS_KEY_ID",
"-e", "AWS_SECRET_ACCESS_KEY",
"-e", "AWS_SESSION_TOKEN",
"-e", "AWS_REGION",
"lza-mcp-server:local"
],
"env": {
"AWS_PROFILE": "<YOUR_AWS_PROFILE>",
"AWS_REGION": "<YOUR_AWS_REGION>"
}
}
}
}