A Model Context Protocol (MCP) server for comprehensive AWS Identity and Access Management (IAM) operations. This server provides AI assistants with the ability to manage IAM users, roles, policies, and permissions while following security best practices.
This server provides the following tools for AI assistants:
List IAM users in the account with optional filtering.
Get detailed information about a specific IAM user including attached policies.
Create a new IAM user.
Delete an IAM user with optional force cleanup.
List IAM roles in the account with optional filtering.
Create a new IAM role with a trust policy.
List IAM groups in the account.
Get detailed information about a specific IAM group.
Create a new IAM group.
Delete an IAM group.
Add a user to an IAM group.
Remove a user from an IAM group.
Attach a managed policy to an IAM group.
Detach a managed policy from an IAM group.
List IAM policies in the account.
Attach a managed policy to an IAM user.
Detach a managed policy from an IAM user.
Create a new access key for an IAM user.
Delete an access key for an IAM user.
Simulate IAM policy evaluation for a principal to test permissions.
Create or update an inline policy for an IAM user.
Retrieve an inline policy for an IAM user.
Delete an inline policy from an IAM user.
List all inline policies for an IAM user.
Create or update an inline policy for an IAM role.
Retrieve an inline policy for an IAM role.
Delete an inline policy from an IAM role.
List all inline policies for an IAM role.