aws-setup
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill leverages official MCP servers (
awslabs.aws-api-mcp-serverandopensearch-mcp-server-py) and a hosted MCP server from an official AWS domain (knowledge-mcp.global.api.aws) to perform its tasks. These sources are aligned with the vendor and trusted cloud providers. - [SAFE]: IAM role configurations (e.g., for Amazon Bedrock access) follow the principle of least privilege, granting only the specific permissions needed for model invocation required by the search functionality.
- [SAFE]: All sensitive data, such as master user passwords and AWS access keys, are represented by placeholders, directing the user to provide their own secure credentials rather than hardcoding them.
- [SAFE]: Infrastructure provisioning steps (VPC configuration, encryption at rest, and node-to-node encryption) adhere to standard AWS security recommendations.
Audit Metadata