AWS Compliance MCP Server

Full documentation: https://aws-samples.github.io/sample-aws-india-compliance-mcp/

An MCP server that assesses AWS infrastructure against regulatory compliance frameworks. Works with Kiro, Claude Desktop, Cursor, or any MCP-compatible client.

Supported frameworks:

• CERT-In Directions on Information Security Practices 2022
• Digital Personal Data Protection Act 2023 + Rules 2025
• IRDAI Information and Cyber Security Guidelines 2023
• RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices
• SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) / Cloud Framework

Important: This tool provides automated assessment guidance based on published regulatory frameworks. It does not constitute legal advice or compliance certification. Organizations should consult qualified compliance and legal professionals for definitive regulatory compliance determinations.

Cost notice: The MCP server performs read-only API calls at no additional charge beyond standard AWS API request pricing. However, deploying conformance packs generated by this tool creates AWS Config rules, which may incur AWS Config pricing charges.

Quick Start

No installation required. Add to your MCP client config and uvx handles the rest:

{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"]
    }
  }
}

If you use a named AWS profile:

{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"],
      "env": {
        "AWS_PROFILE": "my-sso-profile"
      }
    }
  }
}

Add the config to your MCP client's settings file:

• Kiro: .kiro/settings/mcp.json
• Claude Desktop: claude_desktop_config.json
• Claude Code: ~/.claude/mcp.json

Requires uv installed. On macOS: brew install uv

Verify

Ask your MCP client:

"List the DPDP control domains"

If it returns 10 domains, you are set. Then:

"Scan my AWS account in ap-south-1 for DPDP and RBI compliance"

Tools (8)

Sample Prompts

Contributing a New Framework

Each compliance framework is defined in a single YAML file. No Python code changes needed.

python scripts/scaffold_framework.py --new --id gdpr --name "EU GDPR" --source-url "https://gdpr-info.eu"
python scripts/scaffold_framework.py --suggest-checks src/aws_india_compliance/frameworks/gdpr.yaml
python scripts/scaffold_framework.py --validate src/aws_india_compliance/frameworks/gdpr.yaml

See CONTRIBUTING_FRAMEWORKS.md for the full guide.

Documentation

Full documentation is available in the docs/ directory:

• Getting Started - Installation, credentials, environment variables
• Tools Reference - All tools with parameters and examples
• Frameworks - Supported frameworks with domain details
• Architecture - How scanning and assessment works
• Security - Transport, validation, IAM policy

Prerequisites

• Python 3.10+
• AWS Config recorder enabled in target accounts/regions
• IAM credentials with read-only access (minimum IAM policy uses only 20 actions with explicit Deny on destructive operations)
• For org-wide scans: a Config Aggregator

Tests

PYTHONPATH=src python3 -m pytest tests/ -v

License

Apache 2.0

Disclaimer: This is a sample tool for educational and assessment purposes. It performs read-only operations and does not modify AWS resources. Users should validate compliance findings against their specific regulatory requirements and consult qualified compliance professionals.