AWS Terraform MCP Server を試してみた

{
  "mcpServers": {
    "awslabs.terraform-mcp-server": {
      "command": "uvx",
      "args": ["awslabs.terraform-mcp-server@latest"],
      "env": {
        "FASTMCP_LOG_LEVEL": "ERROR"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

{"asset_name": "aws_redshift_integration", "asset_type": "resource", "description": "Terraform resource for managing a DynamoDB zero-ETL integration or S3 event integration with Amazon Redshift. You can refer to the [User Guide](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/RedshiftforDynamoDB-zero-etl.html) for a DynamoDB zero-ETL integration or the [User Guide](https://docs.aws.amazon.com/redshift/latest/dg/loading-data-copy-job.html) for a S3 event integration.", "url": "https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/main/website/docs/r/redshift_integration.html.markdown", "example_usage": [{"title": "Basic Usage", "code": "resource \"aws_dynamodb_table\" \"example\" {\n  name           = \"dynamodb-table-example\"\n  read_capacity  = 1\n  write_capacity = 1\n  hash_key       = \"example\"\n\n  attribute {\n    name = \"example\"\n    type = \"S\"\n  }\n\n  point_in_time_recovery {\n    enabled = true\n  }\n}\n\nresource \"aws_redshiftserverless_namespace\" \"example\" {\n  namespace_name = \"redshift-example\"\n}\n\nresource \"aws_redshiftserverless_workgroup\" \"example\" {\n  namespace_name      = aws_redshiftserverless_namespace.example.namespace_name\n  workgroup_name      = \"example-workgroup\"\n  base_capacity       = 8\n  publicly_accessible = false\n\n  subnet_ids = [aws_subnet.example1.id, aws_subnet.example2.id, aws_subnet.example3.id]\n\n  config_parameter {\n    parameter_key   = \"enable_case_sensitive_identifier\"\n    parameter_value = \"true\"\n  }\n}\n\nresource \"aws_redshift_integration\" \"example\" {\n  integration_name = \"example\"\n  source_arn       = aws_dynamodb_table.example.arn\n  target_arn       = aws_redshiftserverless_namespace.example.arn\n}"}, {"title": "Use own KMS key", "code": "data \"aws_caller_identity\" \"current\" {}\n\nresource \"aws_kms_key\" \"example\" {\n  description             = \"example\"\n  deletion_window_in_days = 10\n}\n\nresource \"aws_kms_key_policy\" \"example\" {\n  key_id = aws_kms_key.example.id\n\n  policy = jsonencode({\n    Version = \"2008-10-17\"\n    Statement = [\n      {\n        Effect = \"Allow\"\n        Principal = {\n          AWS = \"arn:aws:iam::${data.aws_caller_identity.current.account_id}:root\"\n        }\n        Action   = \"kms:*\"\n        Resource = \"*\"\n      },\n      {\n        Effect = \"Allow\"\n        Principal = {\n          Service = \"redshift.amazonaws.com\"\n        }\n        Action = [\n          \"kms:Decrypt\",\n          \"kms:CreateGrant\"\n        ]\n        Resource = \"*\"\n        Condition = {\n          StringEquals = {\n            \"aws:SourceAccount\" = data.aws_caller_identity.current.account_id\n          }\n          ArnEquals = {\n            \"aws:SourceArn\" = \"arn:aws:redshift:*:${data.aws_caller_identity.current.account_id}:integration:*\"\n          }\n        }\n      }\n    ]\n  })\n}\n\nresource \"aws_redshift_integration\" \"example\" {\n  integration_name = \"example\"\n  source_arn       = aws_dynamodb_table.example.arn\n  target_arn       = aws_redshiftserverless_namespace.example.arn\n  kms_key_id       = aws_kms_key.example.arn\n\n  additional_encryption_context = {\n    \"example\" : \"test\",\n  }\n}"}], "arguments": [{"name": "integration_name", "description": "(Required) Name of the integration.", "argument_section": "main"}, {"name": "source_arn", "description": "(Required, Forces new resources) ARN of the database to use as the source for replication. You can specify a DynamoDB table or an S3 bucket.", "argument_section": "main"}, {"name": "target_arn", "description": "(Required, Forces new resources) ARN of the Redshift data warehouse to use as the target for replication.\n\nThe following arguments are optional:", "argument_section": "main"}, {"name": "additional_encryption_context", "description": "(Optional, Forces new resources) Set of non-secret key\u2013value pairs that contains additional contextual information about the data.\nFor more information, see the [User Guide](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context).\nYou can only include this parameter if you specify the `kms_key_id` parameter.", "argument_section": "main"}, {"name": "description", "description": "(Optional) Description of the integration.", "argument_section": "main"}, {"name": "kms_key_id", "description": "(Optional, Forces new resources) KMS key identifier for the key to use to encrypt the integration.\nIf you don't specify an encryption key, Redshift uses a default AWS owned key.\nYou can only include this parameter if `source_arn` references a DynamoDB table.", "argument_section": "main"}, {"name": "tags", "description": "(Optional) Key-value map of resource tags. If configured with a provider [`default_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configuration-block) present, tags with matching keys will overwrite those defined at the provider-level.", "argument_section": "main"}], "attributes": [{"name": "arn", "description": "ARN of the Integration."}, {"name": "tags_all", "description": "A map of tags assigned to the resource, including those inherited from the provider [`default_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configuration-block)."}]}