# Supported AWS Services for the Agent Toolkit: Complete Service Catalog

> Discover supported AWS services for the Agent Toolkit including S3 CloudWatch SageMaker Lambda API Gateway Step Functions EFS Route 53 CloudFront Amplify and IAM KMS Config. Integrate seamlessly with specialized skills.

- Repository: [Amazon Web Services/agent-toolkit-for-aws](https://github.com/aws/agent-toolkit-for-aws)
- Tags: api-reference
- Published: 2026-06-28

---

**The AWS Agent Toolkit supports eleven major AWS service categories including Amazon S3, CloudWatch, SageMaker, Lambda, API Gateway, Step Functions, EFS, Route 53, CloudFront, Amplify, and IAM/KMS/Config, each implemented as specialized skills with dedicated SKILL.md documentation.**

The aws/agent-toolkit-for-aws repository provides a collection of ready-to-use skills that enable Large Language Models (LLMs) to interact with AWS infrastructure through natural language commands. Each supported service is documented in its own [`SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/SKILL.md) file within the repository, which defines the available operations, required IAM permissions, and example implementations according to the aws/agent-toolkit-for-aws source code.

## AWS Storage Services

The toolkit provides comprehensive support for AWS storage infrastructure through system table queries and storage management skills.

### Amazon S3

Amazon S3 support includes querying S3 system tables, listing and copying objects, securing buckets, and working with **S3 Vectors** for vector embeddings. As implemented in [`skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md), you can execute SQL-style queries against S3 metadata. The vector storage functionality is documented in [`skills/specialized-skills/storage-skills/storing-and-querying-vectors/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/storage-skills/storing-and-querying-vectors/SKILL.md), which covers creating vector indexes and performing similarity search with Bedrock integration.

Security and compliance for S3 are handled through [`skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md), which includes IAM policies, encryption options, and AWS Config rules for continuous compliance checking.

### Amazon EFS

For Amazon Elastic File System, the toolkit offers monitoring and troubleshooting capabilities. The [`skills/specialized-skills/storage-skills/troubleshooting-efs/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/storage-skills/troubleshooting-efs/SKILL.md) file contains commands to fetch EFS metrics, troubleshoot throughput issues, and integrate with Lambda and VPC configurations.

## Compute and Serverless Services

The agent toolkit enables full lifecycle management for serverless AWS resources.

### AWS Lambda and API Gateway

The toolkit supports creating, updating, and invoking Lambda functions while connecting them to API Gateway endpoints. The [`skills/specialized-skills/serverless-skills/connecting-lambda-to-api-gateway/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/serverless-skills/connecting-lambda-to-api-gateway/SKILL.md) file provides step-by-step guidance for provisioning Lambda functions and exposing them via REST or HTTP APIs, including Swagger and OpenAPI import capabilities.

### AWS Step Functions

For workflow orchestration, [`skills/specialized-skills/serverless-skills/processing-s3-uploads-with-step-functions/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/serverless-skills/processing-s3-uploads-with-step-functions/SKILL.md) documents how to build state machine definitions, configure trust policies, and orchestrate S3-driven workflows. This includes sample JSON definitions for state machines that process S3 upload events.

## Monitoring and Networking Services

Infrastructure monitoring and traffic management capabilities are implemented through dedicated system table skills.

### Amazon CloudWatch

The CloudWatch integration allows querying logs via system tables and retrieving metrics. As implemented in [`skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md), the skill provides SQL access to log namespaces and supports correlation of log data with other services.

### Route 53 and CloudFront

DNS routing and content delivery are managed through [`skills/specialized-skills/networking-and-content-delivery-skills/routing-traffic-with-route53-and-cloudfront/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/networking-and-content-delivery-skills/routing-traffic-with-route53-and-cloudfront/SKILL.md). This skill covers configuring DNS records, setting up CloudFront distributions, and managing SSL certificate lifecycles.

## Machine Learning and Development Services

Specialized skills support AI/ML workflows and full-stack application development.

### Amazon SageMaker

The SageMaker catalog integration provides access to model, endpoint, and dataset metadata. The [`skills/specialized-skills/system-table-skills/querying-aws-sagemaker-catalog/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/system-table-skills/querying-aws-sagemaker-catalog/SKILL.md) file implements Athena-compatible table queries for discovering SageMaker resources.

### AWS Amplify

For web and mobile development, [`skills/specialized-skills/web-and-mobile-development/aws-amplify/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/web-and-mobile-development/aws-amplify/SKILL.md) documents provisioning full-stack Amplify applications. The skill supports adding authentication, storage, APIs, and AI/ML capabilities through the Amplify CLI.

## Security and Governance Services

IAM, KMS, and AWS Config integrations are referenced throughout the storage security skills. The [`skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md) file specifically covers creating IAM roles and policies, setting up KMS keys for encryption, and enabling Config rules for compliance checking.

## Implementation Examples

Below are practical code examples demonstrating how LLM-driven agents use the toolkit to interact with supported services.

Query S3 metadata using SQL syntax:

```sql
SELECT *
FROM "aws-s3"."bucket_name"
WHERE key LIKE 'photos/%';

```

Retrieve CloudWatch log events for Lambda functions:

```sql
SELECT *
FROM "aws-cloudwatch"."awslogs__log_events"
WHERE logGroup = '/aws/lambda/my-function'
ORDER BY timestamp DESC
LIMIT 100;

```

Deploy a Step Functions state machine using Python and boto3:

```python
import json
import boto3

definition = {
    "Comment": "Process new S3 objects",
    "StartAt": "CopyObject",
    "States": {
        "CopyObject": {
            "Type": "Task",
            "Resource": "arn:aws:states:::aws-sdk:s3:copyObject",
            "Parameters": {
                "Bucket": "dest-bucket",
                "CopySource": "$.s3.object.key",
                "Key": "$.s3.object.key"
            },
            "End": True
        }
    }
}

client = boto3.client('stepfunctions')
client.create_state_machine(
    name='S3CopyWorkflow',
    definition=json.dumps(definition),
    roleArn='arn:aws:iam::123456789012:role/StepFunctionsExecutionRole'
)

```

Configure Amplify storage from the command line:

```bash
amplify add storage

```

Follow the prompts to configure an S3 bucket for public file uploads.

## Summary

- The AWS Agent Toolkit supports **eleven major service categories** including storage, compute, monitoring, networking, ML, and security.
- Each service is implemented as a **specialized skill** with a dedicated [`SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/SKILL.md) file documenting operations and IAM requirements.
- **System table skills** enable SQL-style querying of S3, CloudWatch, and SageMaker metadata.
- **Serverless skills** provide complete Lambda, API Gateway, and Step Functions lifecycle management.
- All skills are located in the `skills/specialized-skills/` directory of the aws/agent-toolkit-for-aws repository.

## Frequently Asked Questions

### Does the AWS Agent Toolkit support Amazon EC2?

While the current skill set focuses on serverless and managed services, the toolkit is extensible. New skills can be added to cover additional services or custom integrations by following the existing [`SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/SKILL.md) structure in the repository.

### How do I add IAM permissions for a specific skill?

Each [`SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/SKILL.md) file contains a dedicated section listing the required IAM permissions. For example, [`skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md) specifies the exact S3 and Athena permissions needed to execute queries against S3 system tables.

### Can I use the toolkit to query CloudWatch logs with SQL?

Yes. The CloudWatch skill in [`skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md`](https://github.com/aws/agent-toolkit-for-aws/blob/main/skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md) enables SQL queries against CloudWatch log groups through a system table abstraction, allowing you to filter and sort log events using standard SQL syntax.

### What is the difference between system table skills and specialized skills?

System table skills, such as those for S3 and CloudWatch, provide SQL interfaces to query service metadata and logs. Specialized skills, such as the Amplify or Step Functions skills, provide procedural guidance and infrastructure-as-code patterns for building and deploying resources.