Supported AWS Services for the Agent Toolkit: Complete Service Catalog

The AWS Agent Toolkit supports eleven major AWS service categories including Amazon S3, CloudWatch, SageMaker, Lambda, API Gateway, Step Functions, EFS, Route 53, CloudFront, Amplify, and IAM/KMS/Config, each implemented as specialized skills with dedicated SKILL.md documentation.

The aws/agent-toolkit-for-aws repository provides a collection of ready-to-use skills that enable Large Language Models (LLMs) to interact with AWS infrastructure through natural language commands. Each supported service is documented in its own SKILL.md file within the repository, which defines the available operations, required IAM permissions, and example implementations according to the aws/agent-toolkit-for-aws source code.

AWS Storage Services

The toolkit provides comprehensive support for AWS storage infrastructure through system table queries and storage management skills.

Amazon S3

Amazon S3 support includes querying S3 system tables, listing and copying objects, securing buckets, and working with S3 Vectors for vector embeddings. As implemented in skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md, you can execute SQL-style queries against S3 metadata. The vector storage functionality is documented in skills/specialized-skills/storage-skills/storing-and-querying-vectors/SKILL.md, which covers creating vector indexes and performing similarity search with Bedrock integration.

Security and compliance for S3 are handled through skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md, which includes IAM policies, encryption options, and AWS Config rules for continuous compliance checking.

Amazon EFS

For Amazon Elastic File System, the toolkit offers monitoring and troubleshooting capabilities. The skills/specialized-skills/storage-skills/troubleshooting-efs/SKILL.md file contains commands to fetch EFS metrics, troubleshoot throughput issues, and integrate with Lambda and VPC configurations.

Compute and Serverless Services

The agent toolkit enables full lifecycle management for serverless AWS resources.

AWS Lambda and API Gateway

The toolkit supports creating, updating, and invoking Lambda functions while connecting them to API Gateway endpoints. The skills/specialized-skills/serverless-skills/connecting-lambda-to-api-gateway/SKILL.md file provides step-by-step guidance for provisioning Lambda functions and exposing them via REST or HTTP APIs, including Swagger and OpenAPI import capabilities.

AWS Step Functions

For workflow orchestration, skills/specialized-skills/serverless-skills/processing-s3-uploads-with-step-functions/SKILL.md documents how to build state machine definitions, configure trust policies, and orchestrate S3-driven workflows. This includes sample JSON definitions for state machines that process S3 upload events.

Monitoring and Networking Services

Infrastructure monitoring and traffic management capabilities are implemented through dedicated system table skills.

Amazon CloudWatch

The CloudWatch integration allows querying logs via system tables and retrieving metrics. As implemented in skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md, the skill provides SQL access to log namespaces and supports correlation of log data with other services.

Route 53 and CloudFront

DNS routing and content delivery are managed through skills/specialized-skills/networking-and-content-delivery-skills/routing-traffic-with-route53-and-cloudfront/SKILL.md. This skill covers configuring DNS records, setting up CloudFront distributions, and managing SSL certificate lifecycles.

Machine Learning and Development Services

Specialized skills support AI/ML workflows and full-stack application development.

Amazon SageMaker

The SageMaker catalog integration provides access to model, endpoint, and dataset metadata. The skills/specialized-skills/system-table-skills/querying-aws-sagemaker-catalog/SKILL.md file implements Athena-compatible table queries for discovering SageMaker resources.

AWS Amplify

For web and mobile development, skills/specialized-skills/web-and-mobile-development/aws-amplify/SKILL.md documents provisioning full-stack Amplify applications. The skill supports adding authentication, storage, APIs, and AI/ML capabilities through the Amplify CLI.

Security and Governance Services

IAM, KMS, and AWS Config integrations are referenced throughout the storage security skills. The skills/specialized-skills/storage-skills/securing-s3-buckets/SKILL.md file specifically covers creating IAM roles and policies, setting up KMS keys for encryption, and enabling Config rules for compliance checking.

Implementation Examples

Below are practical code examples demonstrating how LLM-driven agents use the toolkit to interact with supported services.

Query S3 metadata using SQL syntax:

SELECT *
FROM "aws-s3"."bucket_name"
WHERE key LIKE 'photos/%';

Retrieve CloudWatch log events for Lambda functions:

SELECT *
FROM "aws-cloudwatch"."awslogs__log_events"
WHERE logGroup = '/aws/lambda/my-function'
ORDER BY timestamp DESC
LIMIT 100;

Deploy a Step Functions state machine using Python and boto3:

import json
import boto3

definition = {
    "Comment": "Process new S3 objects",
    "StartAt": "CopyObject",
    "States": {
        "CopyObject": {
            "Type": "Task",
            "Resource": "arn:aws:states:::aws-sdk:s3:copyObject",
            "Parameters": {
                "Bucket": "dest-bucket",
                "CopySource": "$.s3.object.key",
                "Key": "$.s3.object.key"
            },
            "End": True
        }
    }
}

client = boto3.client('stepfunctions')
client.create_state_machine(
    name='S3CopyWorkflow',
    definition=json.dumps(definition),
    roleArn='arn:aws:iam::123456789012:role/StepFunctionsExecutionRole'
)

Configure Amplify storage from the command line:

amplify add storage

Follow the prompts to configure an S3 bucket for public file uploads.

Summary

• The AWS Agent Toolkit supports eleven major service categories including storage, compute, monitoring, networking, ML, and security.
• Each service is implemented as a specialized skill with a dedicated SKILL.md file documenting operations and IAM requirements.
• System table skills enable SQL-style querying of S3, CloudWatch, and SageMaker metadata.
• Serverless skills provide complete Lambda, API Gateway, and Step Functions lifecycle management.
• All skills are located in the skills/specialized-skills/ directory of the aws/agent-toolkit-for-aws repository.

Frequently Asked Questions

Does the AWS Agent Toolkit support Amazon EC2?

While the current skill set focuses on serverless and managed services, the toolkit is extensible. New skills can be added to cover additional services or custom integrations by following the existing SKILL.md structure in the repository.

How do I add IAM permissions for a specific skill?

Each SKILL.md file contains a dedicated section listing the required IAM permissions. For example, skills/specialized-skills/system-table-skills/querying-aws-s3/SKILL.md specifies the exact S3 and Athena permissions needed to execute queries against S3 system tables.

Can I use the toolkit to query CloudWatch logs with SQL?

Yes. The CloudWatch skill in skills/specialized-skills/system-table-skills/querying-aws-cloudwatch/SKILL.md enables SQL queries against CloudWatch log groups through a system table abstraction, allowing you to filter and sort log events using standard SQL syntax.

What is the difference between system table skills and specialized skills?

System table skills, such as those for S3 and CloudWatch, provide SQL interfaces to query service metadata and logs. Specialized skills, such as the Amplify or Step Functions skills, provide procedural guidance and infrastructure-as-code patterns for building and deploying resources.

{
  "mcpServers": {
    "instagit": {
      "command": "npx",
      "args": ["-y", "instagit@latest"]
    }
  }
}