AWS launches CloudTrail MCP Server for enhanced security analysis
News
AWS has launched a new CloudTrail Model Context Protocol (MCP) server in the AWS Labs MCP open-source repository, enhancing security analysis capabilities through AI-driven interactions.
- Enables AI agents to analyze API calls and track user activities via natural language
- Provides direct access to CloudTrail events and CloudTrail Lake analytics
- Allows searching 90-day management event histories
- Supports Trino SQL queries on CloudTrail Lake data up to 10 years old
- Eliminates need for custom API integrations
- Available in all AWS regions supporting CloudTrail LookupEvents API or CloudTrail Lake
The new MCP server simplifies security investigation and compliance workflows by offering a conversational interface for comprehensive AWS environment analysis.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.