other
AWS CLI for Coding Agents
Use the AWS CLI for coding agents with headless JSON commands, schema discovery, credentials, and permission controls.
8 functions 7 read 1 write Bearer token auth
AWS CLI for Coding Agents
Let coding agents discover schemas and execute integration functions through CLI commands or MCP.
Use this pattern when another coding agent needs exact commands and schema discovery. The AWS CLI uses the same integration registry as the TUI, Lua runtime, and MCP gateway, but returns predictable command output for automation.
Command Shape
# AWS CLI for Coding Agents
kosmokrator integrations:configure aws --set access_token="$AWS_ACCESS_TOKEN" --enable --read allow --write ask --json
kosmo integrations:call aws.aws_list_s3_buckets '{"region":"example_region"}' --jsonDiscovery Before Execution
Agents and scripts can inspect AWS docs and schemas before choosing a function.
kosmo integrations:docs aws --json
kosmo integrations:docs aws.aws_list_s3_buckets --json
kosmo integrations:schema aws.aws_list_s3_buckets --json
kosmo integrations:search "AWS" --json
kosmo integrations:list --jsonUseful AWS CLI Functions
| Function | Type | Parameters | Description |
|---|---|---|---|
aws.aws_list_s3_buckets | Read | region | List all S3 buckets in the AWS account. Returns bucket names, creation dates, and regions. |
aws.aws_list_ec2_instances | Read | instance_ids, filters, region | Describe EC2 instances in the AWS account. Returns instance IDs, types, states, and metadata. Supports filtering by instance IDs, states, or tags. |
aws.aws_list_lambda_functions | Read | max_items, region | List all Lambda functions in the AWS account. Returns function names, runtimes, descriptions, and configuration. |
aws.aws_invoke_lambda | Write | function_name, payload, invocation_type, region | Invoke an AWS Lambda function with an optional payload. Supports synchronous (RequestResponse) and asynchronous (Event) invocation modes. |
aws.aws_list_dynamodb_tables | Read | limit, exclusive_start_table_name, region | List all DynamoDB tables in the AWS account. Returns table names and can be used with pagination to enumerate all tables. |
aws.aws_get_cloudwatch_metrics | Read | namespace, metric_name, statistics, start_time, end_time, period, dimensions, region | Get CloudWatch metric data for AWS resources. Supports querying metrics by namespace, metric name, dimensions, and time range with configurable statistics and periods. |
aws.aws_list_sns_topics | Read | next_token, region | List all SNS notification topics in the AWS account. Returns topic ARNs and names. |
aws.aws_get_current_user | Read | none | Get the current IAM user identity. Returns user ARN, account ID, and user ID. Useful for verifying credentials and understanding which AWS account is being accessed. |
Automation Notes
- Use
--jsonfor machine-readable output. - Keep credentials out of argv by using environment variables or stored KosmoKrator configuration.
- Configure read/write policy before unattended runs; use
--forceonly for trusted automation. - Use the MCP gateway instead when the agent needs dynamic tool discovery inside a conversation.