aws-agents-for-devsecops

How to start

1. Paste the command into Claude Code and press Enter.
2. Set DEVOPS_AGENT_REGION, DEVOPS_AGENT_TOKEN in your shell, then restart Claude Code.
3. Try it: type /chat or /cost.

What it adds

9 commands · 13 skills · 1 MCP server

Commands Type it in Claude Code

• /chatOpen a chat session with the AWS DevOps Agent and ask a question
• /costAsk the AWS DevOps Agent for cost optimization opportunities, scoped to your local IaC
• /investigateStart a deep root-cause investigation on the AWS DevOps Agent and stream progress
• /release-readinessTrigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch
• /release-testingRun automated UAT tests (UI or API) using a test profile on the AWS DevOps Agent
• /setup-devops-agentSet up the AWS DevOps Agent MCP connection
• /setup-security-agentSet up the AWS Security Agent workspace
• /setupSet up both AWS DevOps Agent and AWS Security Agent connections
• /spacesList configured AgentSpaces and summarize each one's accounts and capabilities

Skills Claude loads these when the task fits

• analyzing-release-readiness>-
• chatting-with-aws-devops-agent>-
• coordinating-multi-space-devops-agentCoordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), q…
• diff-scanning-with-aws-security-agentRun a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed f…
• investigating-incidents-with-aws-devops-agentRun a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5…
• pentesting-with-aws-security-agentRun an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the…
• remediating-with-aws-security-agent>-
• running-release-tests>-
• scanning-with-aws-security-agentRun an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified fin…
• setup-devops-agentSetup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is broken, or when…
• setup-security-agentConfigure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up…
• setupSet up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are missing.
• …and 1 more in the source.

MCP servers Connections it sets up for you

• aws-devops-agentRemote server at connect.aidevops.${DEVOPS_AGENT_REGION:-us-east-1}.api.aws

Read from the plugin's own files in aws/agent-toolkit-for-aws, 26 Oct 2026.

What it needs

• DEVOPS_AGENT_REGIONSet it in your shell before you start Claude Code. Read by its aws-devops-agent MCP server.
• DEVOPS_AGENT_TOKENSet it in your shell before you start Claude Code. Secret: keep it out of your repo. Read by its aws-devops-agent MCP server.

Taken from the plugin's own MCP configuration.