aws-security-agentcore-complete

ajitnk-lab/aws-security-agentcore-complete

3.1

If you are the rightful owner of aws-security-agentcore-complete and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.

The AWS Security AgentCore Complete Solution is a comprehensive security analysis toolset leveraging Amazon Bedrock AgentCore, designed to provide robust security insights through a conversational AI interface.

Tools
6
Resources
0
Prompts
0

AWS Security AgentCore Complete Solution

A comprehensive AWS security analysis solution using Amazon Bedrock AgentCore, featuring 6 specialized security tools accessible through a conversational AI interface.

Architecture

User → Frontend (S3/CloudFront)
  → Web API Lambda (API Gateway)
    → Bedrock Agent
      → Security Lambda (gateway_proxy_lambda.py)
        → AgentCore Gateway (OAuth)
          → Lambda Target (auto-created)
            → AgentCore Runtime
              → MCP Server (6 tools)

Security Tools

  1. CheckSecurityServices - Analyze security service configurations
  2. GetSecurityFindings - Retrieve security findings from AWS services
  3. CheckStorageEncryption - Verify encryption status of storage services
  4. CheckNetworkSecurity - Assess network security configurations
  5. ListServicesInRegion - List AWS services in specified regions
  6. GetStoredSecurityContext - Retrieve stored security context

Project Structure

  • src/ - Source code for all 7 layers
  • tests/ - Unit and integration tests
  • infrastructure/ - CDK and CloudFormation templates
  • docs/ - Architecture and API documentation
  • scripts/ - Setup, deployment, and testing scripts

Quick Start

  1. Deploy MCP Server to AgentCore Runtime
  2. Setup AgentCore Gateway with OAuth
  3. Deploy Security Lambda proxy
  4. Create Bedrock Agent with action groups
  5. Deploy Web API and Frontend

Key Features

  • OAuth/Cognito authentication
  • Parameter mapping between Bedrock and MCP formats
  • Tool name prefixing (SecurityMCPTools__)
  • Function Details (not OpenAPI) for Bedrock Agent
  • Complete end-to-end security analysis workflow