AWS DevOps AgentをClaude Codeから使えるようにセットアップしてみた（Agent Toolkit for AWS）

curl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "/tmp/AWSCLIV2.pkg"
sudo installer -pkg /tmp/AWSCLIV2.pkg -target /
aws --version

aws-cli/2.37.4 Python/3.14.6 Darwin/25.5.0 exe/arm64

Set up Agent Toolkit for AWS by following instructions: https://raw.githubusercontent.com/aws/agent-toolkit-for-aws/refs/heads/main/setup-instructions/setup.md

aws login --region ap-northeast-1 --profile agent-toolkit

Updated profile agent-toolkit to use arn:aws:sts::<aws-account-id>:assumed-role/<role-name>/<session-name> credentials.

aws sts get-caller-identity --profile agent-toolkit

{
    "UserId": "<user-id>",
    "Account": "<aws-account-id>",
    "Arn": "arn:aws:sts::<aws-account-id>:assumed-role/<role-name>/<session-name>"
}

aws configure agent-toolkit --yes --region us-east-1 --profile agent-toolkit

"aws-mcp": {
  "command": "uvx",
  "args": [
    "mcp-proxy-for-aws@latest",
    "https://aws-mcp.us-east-1.api.aws/mcp",
    "--metadata",
    "INSTALL_SOURCE=aws-cli"
  ],
  "env": {
    "AWS_MCP_PROXY_PROFILES": "agent-toolkit"
  }
}

[mcp_servers.aws-mcp]
command = "uvx"
args = ["mcp-proxy-for-aws@latest", "https://aws-mcp.us-east-1.api.aws/mcp", "--metadata", "INSTALL_SOURCE=aws-cli"]

[mcp_servers.aws-mcp.env]
AWS_MCP_PROXY_PROFILES = "agent-toolkit"

aws agent-toolkit list-available-skills --region us-east-1 --profile agent-toolkit

<!-- BEGIN AWS Agent Toolkit rules -->
# AWS Guidance

- Where these AWS rules conflict with the project's own instructions, the
  project's instructions take precedence.
- Prefer the AWS MCP Server for AWS interactions — it provides sandboxed
  execution, observability, and audit logging. If unavailable, use the
  AWS CLI directly.
（以下略）
<!-- END AWS Agent Toolkit rules -->

What AWS Regions are available?

aws devops-agent list-agent-spaces --region ap-northeast-1 --profile agent-toolkit

{
    "agentSpaces": [
        {
            "name": "Test-DevOpsAgent-AgentToolkit",
            "description": "Agent Toolkit for AWS verification",
            "locale": "ja-JP",
            "createdAt": "2026-09-27T14:01:12.116000+00:00",
            "updatedAt": "2026-09-27T14:01:12.116000+00:00",
            "agentSpaceId": "<agent-space-id>"
        }
    ]
}

/plugin install aws-agents-for-devsecops@claude-plugins-official

/reload-plugins

Reloaded: 3 plugins · 36 skills · 8 agents · 0 hooks · 2 plugin MCP servers · 0 plugin LSP servers

/aws-agents-for-devsecops:setup-devops-agent

{
  "mcpServers": {
    "aws-devops-agent": {
      "command": "uvx",
      "timeout": 120000,
      "args": [
        "mcp-proxy-for-aws-cli@latest",
        "https://connect.aidevops.ap-northeast-1.api.aws/mcp",
        "--service",
        "aidevops",
        "--region",
        "ap-northeast-1"
      ]
    }
  }
}

このエージェントスペースで調査できる AWS アカウントとリージョン、現時点で把握しているリソースの概要を教えてください。

aws devops-agent list-chats --agent-space-id <agent-space-id> --region ap-northeast-1 --profile agent-toolkit

{
    "executions": [
        {
            "executionId": "<execution-id>",
            "createdAt": "2026-09-27T23:13:57.078000+09:00",
            "updatedAt": "2026-09-27T23:14:32.277000+09:00",
            "summary": "AgentSpace内のAWSアカウントとリージョンの確認"
        }
    ]
}

[検証目的] ap-northeast-1 で直近24時間に異常が無かったかのヘルスチェック調査。既知の障害報告は無い。事前確認: Lambda 0件、CloudWatch アラーム1件（ALARM 状態なし）、CloudFormation スタックは <stack-name> のみ。CloudWatch アラーム・メトリクス・CloudTrail の変更イベントから異常や注意すべき変更があれば報告してほしい。