Add to Docker Desktop
Version 4.43 or later needs to be installed to add the server automatically
Tools
| Name | Description |
|---|---|
add_user_to_group | Add a user to an IAM group. |
attach_group_policy | Attach a managed policy to an IAM group. |
attach_user_policy | Attach a managed policy to an IAM user. |
create_access_key | Create a new access key for an IAM user. |
create_group | Create a new IAM group. This tool creates a new IAM group in your AWS account. The group will be created without any permissions by default - you'll need to attach policies separately. ## Security Best Practices: - Use descriptive group names that indicate the group's purpose - Set appropriate paths for organizational structure - Follow the principle of least privilege when assigning permissions later |
create_role | Create a new IAM role. |
create_user | Create a new IAM user. This tool creates a new IAM user in your AWS account. The user will be created without any permissions by default - you'll need to attach policies separately. ## Security Best Practices: - Use descriptive user names that indicate the user's role or purpose - Set appropriate paths for organizational structure - Consider using permissions boundaries to limit maximum permissions - Follow the principle of least privilege when assigning permissions later |
delete_access_key | Delete an access key for an IAM user. |
delete_group | Delete an IAM group. |
delete_role_policy | Delete an inline policy from an IAM role. This tool removes an inline policy from the specified role. The policy document will be permanently deleted and cannot be recovered. |
delete_user | Delete an IAM user. |
delete_user_policy | Delete an inline policy from an IAM user. This tool removes an inline policy from the specified user. The policy document will be permanently deleted and cannot be recovered. |
detach_group_policy | Detach a managed policy from an IAM group. |
detach_user_policy | Detach a managed policy from an IAM user. |
get_group | Get detailed information about a specific IAM group. This tool retrieves comprehensive information about an IAM group including group members, attached policies, and inline policies. Use this to get a complete picture of a group's configuration and membership. ## Usage Tips: - Use this after list_groups to get detailed information about specific groups - Review attached policies to understand group permissions - Check group members to see who has these permissions |
get_managed_policy_document | Retrieve the policy document for a managed policy. This tool retrieves the policy document for a specific managed policy version. Use this to examine the actual permissions and wildcards in managed policies. |
get_role_policy | Retrieve an inline policy for an IAM role. This tool retrieves the policy document for a specific inline policy attached to a role. |
get_user | Get detailed information about a specific IAM user. This tool retrieves comprehensive information about an IAM user including attached policies, group memberships, and access keys. Use this to get a complete picture of a user's permissions and configuration. ## Usage Tips: - Use this after list_users to get detailed information about specific users - Review attached policies to understand user permissions - Check access keys to identify potential security issues |
get_user_policy | Retrieve an inline policy for an IAM user. This tool retrieves the policy document for a specific inline policy attached to a user. |
list_groups | List IAM groups in the account. This tool retrieves a list of IAM groups from your AWS account with optional filtering. Use this to get an overview of all groups or find specific groups by path prefix. ## Usage Tips: - Use path_prefix to filter groups by organizational structure - Adjust max_items to control response size for large accounts - Results may be paginated for accounts with many groups |
list_policies | List IAM policies in the account. |
list_role_policies | List all inline policies for an IAM role. This tool retrieves the names of all inline policies attached to the specified role. |
list_roles | List IAM roles in the account. |
list_user_policies | List all inline policies for an IAM user. This tool retrieves the names of all inline policies attached to the specified user. |
list_users | List IAM users in the account. This tool retrieves a list of IAM users from your AWS account with optional filtering. Use this to get an overview of all users or find specific users by path prefix. ## Usage Tips: - Use path_prefix to filter users by organizational structure - Adjust max_items to control response size for large accounts - Results may be paginated for accounts with many users |
put_role_policy | Create or update an inline policy for an IAM role. This tool creates a new inline policy or updates an existing one for the specified role. Inline policies are directly embedded in a single user, role, or group and have a one-to-one relationship with the identity. |
put_user_policy | Create or update an inline policy for an IAM user. This tool creates a new inline policy or updates an existing one for the specified user. Inline policies are directly embedded in a single user, role, or group and have a one-to-one relationship with the identity. ## Security Best Practices: - Follow the principle of least privilege when creating policies - Use managed policies for common permissions that can be reused - Regularly review and audit inline policies - Test policies using simulate_principal_policy before applying |
remove_user_from_group | Remove a user from an IAM group. |
simulate_principal_policy | Simulate IAM policy evaluation for a principal. |