AWS MCP POLICY

version: "1"
description: "Policy for awslabs/mcp"
default: "allow"
tools:
    describe_log_groups:
        rules: []
    get_active_alarms:
        rules: []
    get_alarm_history:
        rules: []
    get_bestpractices:
        rules: []
    get_cdk_best_practices:
        rules: []
    get_cloudwatch_logs:
        rules: []
    get_cloudwatch_metrics:
        rules: []
    get_eks_vpc_config:
        rules: []
    get_k8s_events:
        rules: []
    get_logs_insight_query_results:
        rules: []
    get_pod_logs:
        rules: []
    get_regional_availability:
        rules: []
    get_resource:
        rules: []
    get_schema:
        rules: []
    list_api_versions:
        rules: []
    list_k8s_resources:
        rules: []
    list_knowledge_bases:
        rules: []
    list_regions:
        rules: []
    list_resources:
        rules: []
    query_sql:
        rules: []
    read_documentation:
        rules: []
    retrieve_agent_sop:
        rules: []
    search_cdk_documentation:
        rules: []
    search_cfn_documentation:
        rules: []
    search_documentation:
        rules: []
    create_resource:
        rules: []
    create_table_from_csv:
        rules: []
    update_resource:
        rules: []
    call_aws:
        rules: []
    execute_log_insights_query:
        rules: []
    invoke_lambda:
        rules: []
    delete_resource:
        rules: []
    tf_destroy:
        rules: []
    analyze_log_group:
        rules: []
    analyze_metric:
        rules: []
    analyze_stack_failures:
        rules: []
    azureterraformbestpractices:
        rules: []
    bedrock_kb_retrieve:
        rules: []
    cancel_logs_insight_query:
        rules: []
    check_cdk_nag_suppressions:
        rules: []
    dynamodb_data_model_validation:
        rules: []
    dynamodb_data_modeling:
        rules: []
    explain_cdk_nag_rule:
        rules: []
    manage_eks_stacks:
        rules: []
    manage_k8s_resource:
        rules: []
    source_db_analyzer:
        rules: []
    suggest_aws_commands:
        rules: []
    tf_apply:
        rules: []
    tf_init:
        rules: []
    tf_output:
        rules: []
    tf_plan:
        rules: []
    tf_state_list:
        rules: []
    tf_validate:
        rules: []
    validate_cfn_security:
        rules: []
    validate_cfn_template:
        rules: []