AWS Agents for DevSecOps

Skills (13)

Claude uses these on its own when your request matches.

• analyzing-release-readinessTrigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness, and potential rollback issues before merging. Trigger words include release readiness, analyze PR, analyze MR, review…
• chatting-with-aws-devops-agentHave a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency questions, and quick diagnostics — anything that needs a 5-30 second answer rather than a…
• coordinating-multi-space-devops-agentCoordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and synthesize, or compare findings across accounts. Use whenever the user has more…
• diff-scanning-with-aws-security-agentRun a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.
• investigating-incidents-with-aws-devops-agentRun a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug",…
• pentesting-with-aws-security-agentRun an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the managed Security Agent service, and returns verified runtime findings. Use when the user asks to pentest, run a…
• remediating-with-aws-security-agentPull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did…
• running-release-testsRun automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for regressions, or test API endpoints. Trigger words include run tests, UAT, test my app,…
• scanning-with-aws-security-agentRun an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked, verified findings with code locations and remediations. Use when the user asks to scan code, find vulnerabilities, run a security…
• setup-devops-agentSetup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is broken, or when the user says "set up devops agent" / "configure agent". Does NOT trigger if the MCP is already connected and working.
• setup-security-agentConfigure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up security agent", "configure security scanner", "is security agent configured", or on first-time use before any scan or…
• setupSet up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are missing.
• threat-modeling-with-aws-security-agentRun an AWS Security Agent threat model review on spec/design documents. Use when the user asks to review a spec for security, run a threat model, check if a design introduces security risks, review requirements.md or design.md for security posture changes, or STRIDE analysis.

MCP server

Added to Claude Code when you install the plugin. You sign in to AWS Agents for DevSecOps the first time it is used.

• aws-devops-agentRemotehttps://connect.aidevops.${DEVOPS_AGENT_REGION:-us-east-1}.api.aws/mcp

Commands (9)

Shortcuts you type in Claude Code.

• /chatOpen a chat session with the AWS DevOps Agent and ask a question
• /costAsk the AWS DevOps Agent for cost optimization opportunities, scoped to your local IaC
• /investigateStart a deep root-cause investigation on the AWS DevOps Agent and stream progress
• /release-readinessTrigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch
• /release-testingRun automated UAT tests (UI or API) using a test profile on the AWS DevOps Agent
• /setup-devops-agentSet up the AWS DevOps Agent MCP connection
• /setup-security-agentSet up the AWS Security Agent workspace
• /setupSet up both AWS DevOps Agent and AWS Security Agent connections
• /spacesList configured AgentSpaces and summarize each one's accounts and capabilities

Install

claude plugin install aws-agents-for-devsecops@claude-plugins-official

/plugin install aws-agents-for-devsecops@claude-plugins-official