Execute AWS CLI commands with validation and error handling.

This is the primary tool for executing AWS CLI commands. Use this when you know the specific AWS service and operation you want to perform.

Key points:

• Commands MUST start with "aws" and follow AWS CLI syntax

• Default region: us-east-1 (override with --region parameter)

• Working directory: /tmp/aws-mcp-work

• Use absolute paths for files

Command restrictions:

• DO NOT use shell pipes (|), redirects (>, >>, <), or command substitution ($())

• DO NOT use shell variables or environment variables

• DO NOT use relative paths for file operations

Examples:

• "aws ec2 describe-instances" - List EC2 instances

• "aws s3 ls" - List S3 buckets

• "aws lambda list-functions" - List Lambda functions

• "aws iam list-users" - List IAM users

• "aws cloudwatch describe-alarms" - List CloudWatch alarms

Returns: Dictionary with success status, output data, and error information

Suggest AWS CLI commands based on a natural language query.

Use this tool when you're unsure about the exact AWS CLI command syntax or want to explore available commands for a specific task.

Best practices for query formulation:

1. Include the AWS service name (EC2, S3, Lambda, etc.)

2. Describe the action you want to perform

3. Include any relevant context or constraints

Query examples:

• "List all running EC2 instances in us-east-1"

• "Get the size of my S3 bucket named 'my-backup-bucket'"

• "List all IAM users with AdministratorAccess policy"

• "Show me all Lambda functions in my account"

• "Create a new security group for SSH access"

Returns: Dictionary with success status, query, and list of suggested commands

Get a list of available AWS regions.

Returns: Dictionary with success status and list of AWS regions

Get the AWS identity of the current caller.

Returns information about the IAM user or role whose credentials are used to call the operation.

Returns: Dictionary with success status and caller identity (Account, ARN, UserId)