AWS adds a new Model Context Protocol (MCP) server for AWS CloudTrail in the AWS Labs MCP open-source repository. This server enables AI agents to leverage comprehensive security and compliance capabilities through simple conversational interfaces. The CloudTrail MCP server allows AI assistants to analyze API calls, track user activities, and perform advanced security analysis across your AWS environment through natural language interactions.
The MCP server streamlines security investigation and compliance workflows by offering direct access to CloudTrail events and CloudTrail Lake analytics. AI agents can efficiently search 90-day management event histories and run Trino SQL queries on CloudTrail Lake data spanning up to 10 years. This natural language interface eliminates the need for custom API integrations, allowing AI agents to conduct security analyses and compliance checks seamlessly.
Available in all AWS regions where CloudTrail LookupEvents API or CloudTrail Lake is supported. Refer to documentation to learn more about supported regions.
Download CloudTrail MCP server from AWS Labs MCP open-source repository. To get started, visit:
Categories: general:products/aws-cloudtrail,marketing:marchitecture/management-tools,marketing:marchitecture/management-and-governance
Source: Amazon Web Services
Latest Posts
- Radar – Content Type Dimension for AI Bots in Cloudflare Radar

- Cloudflare Fundamentals – Introducing Markdown for Agents

- Dynamics 365 Project Operations – Support for line discounts and fees in resource-based deployments [MC1231151]
![Dynamics 365 Project Operations – Support for line discounts and fees in resource-based deployments [MC1231151] 4 pexels olly 3760809](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Dynamics 365 Contact Center – Set a custom voice for voice agents [MC1231135]
![Dynamics 365 Contact Center - Set a custom voice for voice agents [MC1231135] 5 pexels padrinan 1111317](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)



![Dynamics 365 Project Operations – Support for line discounts and fees in resource-based deployments [MC1231151] 4 pexels olly 3760809](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-olly-3760809-150x150.webp)
![Dynamics 365 Contact Center - Set a custom voice for voice agents [MC1231135] 5 pexels padrinan 1111317](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-padrinan-1111317-150x150.webp)

The addition of an MCP server for CloudTrail feels like a big stepBlog comment creation forward in making AWS security data more usable. Being able to query API calls and user activity through conversational interfaces could really streamline incident investigations and compliance checks. I’m curious to see how teams balance this accessibility with proper guardrails to avoid exposing sensitive insights too broadly.