general MCP Server
Zero-egress autonomous incident response for AWS — Knowledge Graph + Bedrock PrivateLink + HITL approval. No AI traffic ever leaves your VPC.
Discovered via github-topic:mcp-server and last synced 4mo ago.
Install instructions not detected yet
Check the source repository for the latest setup steps.
Checks governance + node lock before executing any action
Executes approved action via resource plugin, writes precedent
Tokens
CloudTrail — S3 WORM + KMS
scale_desired, force_new_deployment, stop_service
>= 1.5
Loads full Digital Twin context for an incident node
ECS force-new-deployment, Lambda concurrency
HIPAA
Actions
--- ## Relation to aws-sovereign-ops [aws-sovereign-ops](https://github.com/kratosvil/aws-sovereign-ops) is the v1 demo that validated the concept (4/4 Lambda e2e scenarios passed). SAO Platform is the architectural evolution — the Digital Twin Context Map replaces manual context collection and enables zero-hallucination reasoning at scale. --- ## Prerequisites
Contents
Description
Least-privilege — no IAM write, no billing, no root
Terraform >= 1.5, S3 remote backend
update_timeout, update_memory, update_concurrency
>= 3.12
`/debug/context/{node_id}`
`cluster`, `service`
Name
What to set
SOC2 / PCI-DSS
`/debug/prompt`
`cluster`, `service`, `desired_count`
`<account-id>.dkr.ecr.<region>.amazonaws.com/sao-mcp-server`
New unique S3 bucket name (Terraform creates it)
Amazon Titan Embeddings v1 (1536 dims) + cosine similarity (Python)
Path
`function_name`, `reserved_concurrent_executions`
`db_instance_identifier`
RDS operations, service stop
latest
Existing S3 bucket where your tfstate lives
Compliance
Current Digital Twin summary (nodes, edges, locks, precedent count)
`function_name`, `memory_size`
Configured with credentials for the target account
Cause
`reason`
Version
Email that receives APPROVE/REJECT HITL links
Reduce MTTR without manual on-call toil
Parameters
Approval
Must be `us.anthropic.claude-sonnet-4-6` — see note below
**Why this matters:** when Bedrock proposes a fix, it sees the exact network topology, knows which actions are governance-blocked, and retrieves semantically similar past incidents via RAG. Impossible or dangerous proposals are structurally prevented, not prompt-engineered away. --- ## Semantic RAG on Precedents (Phase 8) After each approved and executed fix, the Lambda HITL Executor registers a precedent with a vector embedding: ``` incident query → Titan Embeddings (amazon.titan-embed-text-v1, 1536 dims) ↓ cosine similarity against all stored precedents ↓ top-k most similar past incidents injected into Bedrock context ``` Validated: `similarity_score=0.8484` on same-type incident replay. The system gets smarter with every resolved incident without retraining. --- ## Tech Stack
`function_name`, `timeout`
Lambda timeout/memory update
Only if your tfstate bucket uses SSE-KMS
FedRAMP
Detecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.
Detecting data exfiltration attempts from AWS S3 buckets by analyzing CloudTrail S3 data events, VPC Flow Logs, GuardDuty findings, Amazon Macie alerts, and S3 access patterns to identify unauthorized bulk downloads and cross-account data transfers.
Implement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.
Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
Flexible and powerful framework for managing multiple AI agents and handling complex conversations
为独立开发者准备的精选技术栈和工具仓库来了！这里有你最需要的工具，帮你提升开发效率、节约成本，最重要的是——这些工具都是市场上热门的，经过验证的。🚀A curated collection of tech stacks and tools tailored for independent developers is here! these are proven, popular tools widely used in the industry. 🚀
Learn Cloud Applied Generative AI Engineering (GenEng) using OpenAI, Gemini, Streamlit, Containers, Serverless, Postgres, LangChain, Pinecone, and Next.js
The secure gateway connecting AI agents to enterprise systems.
Learn how to use the cloud-aws Claude skill. Complete guide with installation instructions and examples.
Learn how to use the detecting-aws-iam-privilege-escalation Claude skill. Complete guide with installation instructions and examples.
Learn how to use the detecting-aws-guardduty-findings-automation Claude skill. Complete guide with installation instructions and examples.