AWS India Compliance MCP Server

An MCP server that assesses AWS infrastructure against Indian regulatory compliance frameworks. Works with Kiro, Claude Desktop, Cursor, or any MCP-compatible client.

Supported frameworks:

• DPDP Act 2023 (Digital Personal Data Protection) + Rules 2025
• RBI Master Direction on IT Governance 2023
• SEBI CSCRF 2024 (Cybersecurity and Cyber Resilience Framework)
• CERT-In Directions 2022 (Incident reporting, log retention, NTP sync)

Important: This tool provides automated assessment guidance based on published regulatory frameworks. It does not constitute legal advice or compliance certification. Organizations should consult qualified compliance and legal professionals for definitive regulatory compliance determinations.

Cost notice: The MCP server performs read-only API calls at no additional charge beyond standard AWS API request pricing. However, deploying conformance packs generated by this tool creates AWS Config rules, which may incur AWS Config pricing charges.

Quick Start

No installation required. Add to your MCP client config and uvx handles the rest:

{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"]
    }
  }
}

If you use a named AWS profile:

{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"],
      "env": {
        "AWS_PROFILE": "my-sso-profile"
      }
    }
  }
}

Add the config to your MCP client's settings file:

• Kiro: .kiro/settings/mcp.json
• Claude Desktop: claude_desktop_config.json
• Claude Code: ~/.claude/mcp.json

Requires uv installed. On macOS: brew install uv

Verify

Ask your MCP client:

"List the DPDP control domains"

If it returns 10 domains, you are set. Then:

"Scan my AWS account in ap-south-1 for DPDP and RBI compliance"

Tools (8)

Sample Prompts

Contributing a New Framework

Each compliance framework is defined in a single YAML file. No Python code changes needed.

python scripts/scaffold_framework.py --new --id gdpr --name "EU GDPR" --source-url "https://gdpr-info.eu"
python scripts/scaffold_framework.py --suggest-checks src/aws_india_compliance/frameworks/gdpr.yaml
python scripts/scaffold_framework.py --validate src/aws_india_compliance/frameworks/gdpr.yaml

See CONTRIBUTING_FRAMEWORKS.md for the full guide.

Documentation

Full documentation is available in the docs/ directory:

• Getting Started - Installation, credentials, environment variables
• Tools Reference - All tools with parameters and examples
• Frameworks - Supported frameworks with domain details
• Architecture - How scanning and assessment works
• Security - Transport, validation, IAM policy

Prerequisites

• Python 3.10+
• AWS Config recorder enabled in target accounts/regions
• IAM credentials with read-only access (see Security)
• For org-wide scans: a Config Aggregator

Tests

PYTHONPATH=src python3 -m pytest tests/ -v

License

Apache 2.0

Disclaimer: This is a sample tool for educational and assessment purposes. It performs read-only operations and does not modify AWS resources. Users should validate compliance findings against their specific regulatory requirements and consult qualified compliance professionals.