AWS Model Context Protocol Server

# Simplified Dockerfile - installs pre-built wheel ARG PYTHON_VERSION=3.13-slim FROM --platform=${TARGETPLATFORM} python:${PYTHON_VERSION} # Set target architecture argument ARG TARGETPLATFORM ARG TARGETARCH ARG BUILD_DATE ARG VERSION # Add metadata LABEL maintainer="alexei-led" \ description="AWS Multi-Command Proxy Server" \ org.opencontainers.image.source="https://github.com/alexei-led/aws-mcp-server" \ org.opencontainers.image.version="${VERSION}" \ org.opencontainers.image.created="${BUILD_DATE}" # Step 1: Install system packages (minimal set for AWS CLI operation) RUN apt-get update && apt-get install -y --no-install-recommends \ unzip \ curl \ wget \ less \ groff \ jq \ gnupg \ tar \ gzip \ zip \ openssh-client \ grep \ sed \ gawk \ findutils \ && apt-get clean \ && rm -rf /var/lib/apt/lists/* # Step 2: Install AWS CLI based on architecture RUN if [ "${TARGETARCH}" = "arm64" ]; then \ curl -sSL "https://awscli.amazonaws.com/awscli-exe-linux-aarch64.zip" -o "awscliv2.zip"; \ else \ curl -sSL "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"; \ fi \ && unzip -q awscliv2.zip \ && ./aws/install \ && rm -rf awscliv2.zip aws # Step 3: Install Session Manager plugin (only for x86_64 due to compatibility issues on ARM) RUN if [ "${TARGETARCH}" = "amd64" ]; then \ curl -sSL "https://s3.amazonaws.com/session-manager-downloads/plugin/latest/ubuntu_64bit/session-manager-plugin.deb" -o "session-manager-plugin.deb" \ && dpkg -i session-manager-plugin.deb 2>/dev/null || apt-get -f install -y \ && rm session-manager-plugin.deb; \ else \ echo "Skipping Session Manager plugin installation for ${TARGETARCH} architecture"; \ fi # Set up application directory, user, and permissions RUN useradd -m -s /bin/bash -u 10001 appuser \ && mkdir -p /app/logs && chmod 777 /app/logs \ && mkdir -p /home/appuser/.aws && chmod 700 /home/appuser/.aws WORKDIR /app # Copy and install pre-built wheel COPY dist/*.whl /tmp/ RUN pip install --no-cache-dir /tmp/*.whl && rm -rf /tmp/*.whl # Set ownership RUN chown -R appuser:appuser /app # Switch to non-root user USER appuser # Set all environment variables in one layer ENV HOME="/home/appuser" \ PATH="/usr/local/bin:/usr/local/aws/v2/bin:${PATH}" \ PYTHONUNBUFFERED=1 \ AWS_MCP_TRANSPORT=stdio # Expose the service port EXPOSE 8000 # Set command to run the server ENTRYPOINT ["aws-mcp"]