AWS aws-mcp high security documentation change
Summary
Multiple changes: authentication troubleshooting note, corrected installation commands, policy action name fix, and URL updates
Security assessment
The change to policy action 'aws-mcp:InvokeMcp' fixes a typo that could have caused misconfigured IAM policies, potentially leading to authorization issues. The installation command changes (piping to 'sh'/'iex' instead of 'less'/'more') improve correctness but introduce security implications if the script source is untrusted (though AWS documentation is trusted).
Diff
diff --git a/aws-mcp/latest/userguide/getting-started-aws-mcp-server.md b/aws-mcp/latest/userguide/getting-started-aws-mcp-server.md index dffb17366..63f5e8abf 100644 --- a//aws-mcp/latest/userguide/getting-started-aws-mcp-server.md +++ b//aws-mcp/latest/userguide/getting-started-aws-mcp-server.md @@ -140,0 +141,4 @@ You can use the SigV4 via Proxy to authenticate the AWS MCP Server. SigV4 via Pr +###### Note + +If your authentication step worked previously but you have encountered an authentication error, you might need to refresh your credentials and try again. + @@ -175 +179 @@ Enter your Access Key ID, Secret Access Key, default region, and output format. - curl -LsSf https://astral.sh/uv/install.sh | less + curl -LsSf https://astral.sh/uv/install.sh | sh @@ -179 +183 @@ Enter your Access Key ID, Secret Access Key, default region, and output format. - powershell -c "irm https://astral.sh/uv/install.ps1 | more“ + powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex" @@ -278 +282 @@ Skip this step if you're using an administrator role. - "aws-mcp:InvokeMCP", + "aws-mcp:InvokeMcp", @@ -312 +316 @@ Or to see installed MCP servers: -You should see tools like `aws___search_documentation` and `retrieve_agent_sop` listed. For more information about the tools, see [Understanding the MCP Server tools](https://docs.aws.amazon.com/aws-mcp/latest/userguide/understanding-mcp-server-tools.html). +You should see tools like `aws__search_documentation` and `retrieve_agent_sop` listed. For more information about the tools, see [Understanding the MCP Server tools](https://docs.aws.amazon.com/aws-mcp/latest/userguide/understanding-mcp-server-tools.html).