AWS Core

AWS Core is the main plugin in Amazon Web Services' Agent Toolkit for AWS, and the one AWS says to start with. It bundles the AWS MCP Server, a managed server for current AWS documentation and the AWS APIs, with AWS's own agent skills, which load when a task matches. What its skills cover - Infrastructure as code with the AWS CDK (TypeScript or Python) and CloudFormation, including validation and finding why a stack failed - Serverless applications with Lambda, API Gateway, Step Functions and EventBridge, and containers on ECS, EKS, Fargate and ECR - Choosing and running databases, from Aurora, RDS and DynamoDB to DocumentDB, Neptune and ElastiCache - Storage, networking, IAM, Cognito sign-in, EC2 fleets, and messaging and streaming - Observability with CloudWatch, X-Ray and CloudTrail - Generative AI and models with Amazon Bedrock and SageMaker - Costs: analysing the bill, budgets, Savings Plans and right-sizing - Best practices for the AWS SDKs for Python (boto3), JavaScript v3 and Swift - Well-Architected Framework reviews of your code and infrastructure, CI/CD with CodePipeline, and launching a web app on AWS How to install it In Claude Code, run /plugin install aws-core@claude-plugins-official, then /reload-plugins. It's also in Codex (codex plugin marketplace add aws/agent-toolkit-for-aws, then /plugins), Cursor (add aws/agent-toolkit-for-aws as a team marketplace) and Devin (devin plugins install aws/agent-toolkit-for-aws#plugins/aws-core). How it connects - The AWS MCP Server runs through the MCP Proxy for AWS with uvx, so you need uv installed. - Documentation search and skills work without signing in. Calling AWS APIs needs AWS credentials on your machine, for example from aws login in the AWS CLI. - Its tools search and read AWS documentation, check which Regions offer a service, run Python scripts against the AWS APIs in a sandbox, and create pre-signed S3 links. Good to know - IAM context keys let you write policies that apply only to what agents do through the MCP server, for example keeping an agent read-only, and requests are logged in CloudTrail. - In Claude Code it adds a check that stops the agent fetching secret values from Secrets Manager directly. - The toolkit costs nothing extra; you pay only for the AWS resources your agent creates or uses.

• “Create an S3 bucket with versioning and a lifecycle policy that moves objects to Glacier after 90 days.”

  Copy

• “Connect a Lambda function to API Gateway with the CDK.”

  Copy

• “Why did my CloudFormation stack fail to deploy?”

  Copy

• “Where is our AWS bill going, and where can we save?”

  Copy

• “Review this workload against the Well-Architected Framework.”

  Copy

• “Deploy my React app to AWS.”

  Copy