Sallyport
MenuClose
All services

Amazon Web Services

Your agent works in Amazon Web Services with your key, and never holds it.

Connect my agent to Amazon Web Services
  • 7 days free
  • Cancel anytime
  • Nothing to install
Kind of work
Cloud, hosting and domains
How you connect
  • Access key and secret
What waits for you
Nothing, until you turn on asking

What your agent can do there

Deploy apps, run servers, change DNS records and renew domains.

  • cloud
  • servers
  • EC2
  • S3
  • storage
  • Lambda
  • DNS
  • Route 53
  • IAM

Amazon Web Services also runs a remote MCP server of its own. Connect it the same way, and your agent gets its tools too. See the remote MCP servers

At the provider

Technical details
Hosts
*.amazonaws.com
Key type
aws-sigv4
Key goes in
Authorization

Which calls read, write or destroy

WhenClass
X-Amz-Target: (?i)(^|[._])(CreateLoginProfile|UpdateLoginProfile|AdminSetUserPassword)$write
?Action=^(CreateLoginProfile|UpdateLoginProfile|AdminSetUserPassword)$write
Action=^(CreateLoginProfile|UpdateLoginProfile|AdminSetUserPassword)$write
X-Amz-Target: (?i)(^|[._])CreateAccount$write
?Action=^CreateAccount$write
Action=^CreateAccount$write
X-Amz-Target: (?i)(^|[._])(CreateUser|AdminCreateUser)$write
?Action=^(CreateUser|AdminCreateUser)$write
Action=^(CreateUser|AdminCreateUser)$write
X-Amz-Target: (?i)(^|[._])[A-Za-z]*(Delete|Terminate|Remove|Revoke|Detach|Disable|Stop|Cancel)[A-Za-z]*$write
?Action=^[A-Za-z]*(Delete|Terminate|Remove|Revoke|Detach|Disable|Stop|Cancel)[A-Za-z]*$write
Action=^[A-Za-z]*(Delete|Terminate|Remove|Revoke|Detach|Disable|Stop|Cancel)[A-Za-z]*$write
?Action=^(RunInstances|RequestSpotInstances|RequestSpotFleet|CreateFleet|PurchaseReservedInstancesOffering|PurchaseHostReservation|PurchaseScheduledInstances|AllocateHosts|AllocateAddress|CreateNatGateway|CreateDBInstance|CreateDBCluster|CreateCacheCluster|CreateReplicationGroup)$write
Action=^(RunInstances|RequestSpotInstances|RequestSpotFleet|CreateFleet|PurchaseReservedInstancesOffering|PurchaseHostReservation|PurchaseScheduledInstances|AllocateHosts|AllocateAddress|CreateNatGateway|CreateDBInstance|CreateDBCluster|CreateCacheCluster|CreateReplicationGroup)$write
GET HEAD ?Action=^[A-Za-z0-9]+$write
^sts(\.[a-z0-9-]+)?\.amazonaws\.com$write

Without a matching rule, GET, HEAD and OPTIONS read, POST, PUT and PATCH write, and DELETE and any other method destroy. A recipe rule only raises a GET the vendor changes something with to a write. No recipe rule makes a call destructive.

Token IP filtering

If the provider can limit a token to IP addresses, allow Sallyport's outbound address. The connection form shows it, ready to copy.

Open the connection form

More in Cloud, hosting and domains

6

Bring a service the catalogue has never seen

Add its web address and your key, and your agent uses it like any of the 827. If your agent runs into a service you haven’t added, it sends you a link.

  • 7 days free
  • Cancel anytime
  • Nothing to install