Returns the AWS IAM caller identity (user/role) to verify credentials.

Lists all S3 buckets in the AWS account.

Lists EC2 instances in the current region, showing ID, type, state, and public IP.

Lists IAM users in the AWS account.

Lists recent CloudTrail events to track console access and changes.

Lists CloudWatch alarms, optionally filtering by state.

Retrieves daily AWS costs for the specified date range (default: last 7 days).

Retrieves AWS costs broken down by service for the specified date range.

Detailed cost analysis. If service_name is provided, breaks down that service by Usage Type. Otherwise, breaks down by Service.

Predicts future costs for a specified time range.

Lists all AWS Budgets along with their status, limits, and current spend.

Retrieves cost anomalies detected by AWS Cost Anomaly Detection.

Retrieves Savings Plans utilization percentages.

Retrieves Reserved Instance (RI) utilization percentages.

Retrieves detailed information about a specific EC2 instance.

Lists all VPCs in the current region.

Lists subnets with availability zones and available IP counts.

Lists route tables with their routes and associations.

Lists Internet Gateways and their attachments.

Lists NAT Gateways with their state and public IP.

Lists all security groups.

Lists IAM users who do not have MFA enabled.

Lists access keys older than 90 days (or specified days).

Lists ACM certificates expiring within the specified days.

Lists RDS instances with engine versions and status.

Lists Lambda functions with runtimes and last modified dates.

Lists recent backup jobs, optionally filtering by state (default: FAILED).

Lists security groups that allow ingress from 0.0.0.0/0 on specified ports (default: 22, 3389).

Lists EBS volumes that are available (not attached to any instance).

Lists Elastic IPs that are not associated with any instance.

Lists recent high-severity GuardDuty findings.

Retrieves recent log events from a CloudWatch Log Group.

Search CloudWatch logs using a filter pattern (e.g., 'ERROR', 'Exception').

Lists write/mutation events (Create, Update, Delete) for a specific resource or service.

Lists recent Access Denied or Unauthorized events from CloudTrail.

Lists recent open events from AWS Health Dashboard.

Lists all Application and Network Load Balancers.

Lists all Target Groups.

Lists listeners and routing rules (host, path) for a specified Load Balancer.

Retrieves the health of targets in a specified Target Group.

Lists Web ACLs (Global/CloudFront or Regional).

Retrieves sampled requests from a Web ACL.

Checks if an IP address exists in any WAF IP Set (Blocklists/Allowlists).

Retrieves statistics for a specific CloudWatch metric.

Lists all SNS topics.

Lists DNS records for a given hosted zone.

Lists all Route53 Hosted Zones.

Lists ECS clusters with their status and running task counts.

Lists services in a specific ECS cluster.

Lists EKS clusters in the current region.

Lists Auto Scaling Groups with their capacity settings.

Describes recent scaling activities for an Auto Scaling Group.

Lists CloudFront distributions with their domain names and status.

Lists Secrets Manager secrets (names only).

Lists SSM Parameters (names only).

Lists CloudFormation stacks and their status.

Lists DynamoDB tables.

Lists Trusted Advisor checks available.