AWS
Call any AWS API with your IAM credentials, mint presigned S3 URLs, and look up current AWS documentation, skills and regional availability.
Tools2
aws__call_awsFreeCall any AWS API operation directly, as boto3 would, signed with the connection's IAM credentials. Parameters are checked against AWS's own service model (botocore) before anything is sent, and the result is the parsed response boto3 returns, as JSON — for example {service: "ec2", operation: "DescribeInstances", params: {MaxResults: 50}, region: "us-west-2"}. One call is one API request: page with the token the response returns (NextToken, Marker, ContinuationToken …) and repeat per region yourself. Operations named Get*, List*, Describe* or Head* are reads; anything else is a write and may need an approval first, as do reads that return a stored secret (Secrets Manager values, SSM parameters read WithDecryption, an EC2 Windows password). Operations whose purpose is to hand out an AWS credential (STS AssumeRole and GetSessionToken, IAM CreateAccessKey, ECR and CodeArtifact authorization tokens, Redshift cluster credentials, …) are refused: CoreSpeed does not issue AWS credentials to agents. Blobs come back base64; an S3 object body comes back as {encoding, bytes, data}. The IAM policy of the connected identity decides what is allowed. Use search_documentation / read_documentation to look up an operation's parameters.Call any AWS API operation directly, as boto3 would, signed with the connection's IAM credentials. Parameters are checked against AWS's own service model (botocore) before anything is sent, and the result is the parsed response boto3 returns, as JSON — for example {service: "ec2", operation: "DescribeInstances", params: {MaxResults: 50}, region: "us-west-2"}. One call is one API request: page with the token the response returns (NextToken, Marker, ContinuationToken …) and repeat per region yourself. Operations named Get*, List*, Describe* or Head* are reads; anything else is a write and may need an approval first, as do reads that return a stored secret (Secrets Manager values, SSM parameters read WithDecryption, an EC2 Windows password). Operations whose purpose is to hand out an AWS credential (STS AssumeRole and GetSessionToken, IAM CreateAccessKey, ECR and CodeArtifact authorization tokens, Redshift cluster credentials, …) are refused: CoreSpeed does not issue AWS credentials to agents. Blobs come back base64; an S3 object body comes back as {encoding, bytes, data}. The IAM policy of the connected identity decides what is allowed. Use search_documentation / read_documentation to look up an operation's parameters.
aws__get_presigned_urlFreeGenerate presigned S3 URLs for uploading (PUT) or downloading (GET) objects, signed with the connection's credentials. Use them to move file bytes between S3 and somewhere this tool cannot reach — call_aws itself returns object bodies of a few MB inline. No special headers are needed unless s3_params sets a header parameter; then the returned headers MUST be sent, or S3 rejects the request with SignatureDoesNotMatch. Max upload 5 GB per PUT; larger files use multipart upload through call_aws.Generate presigned S3 URLs for uploading (PUT) or downloading (GET) objects, signed with the connection's credentials. Use them to move file bytes between S3 and somewhere this tool cannot reach — call_aws itself returns object bodies of a few MB inline. No special headers are needed unless s3_params sets a header parameter; then the returned headers MUST be sent, or S3 rejects the request with SignatureDoesNotMatch. Max upload 5 GB per PUT; larger files use multipart upload through call_aws.
