“Show me every EC2 instance running in production.”
“Which IAM users don't have MFA enabled?”
“Why did my AWS bill suddenly increase?”
“Who changed the Security Group before production went down?”
“Which EKS pods are stuck in CrashLoopBackOff?”
“Why is my production application slow?”
And instead of manually opening AWS Console, CloudWatch, CloudTrail, IAM, EKS and the terminal, Claude could investigate your infrastructure using the tools you build.
This is not another PDF that spends 50 pages explaining what MCP means and leaves you wondering what to do next.
It is a from-scratch build walkthrough.
You start with a simple Python MCP server.
Then you connect it to AWS using boto3.
Then you build real MCP tools.
Then you build 7 specialized AWS MCP servers.
Then you connect all seven to Claude Desktop.
Then you make them work together.
Finally, you take the project toward Docker, production deployment and security hardening.
The guide is explicitly structured as a from-scratch build, with each server following the same reusable architecture.
By following the guide, you build:
EC2 • VPC • Subnets • Route Tables • Gateways • Security Groups • S3 • Lambda • ECR • EBS • Route 53
Logs • Metrics • Alarms • CPU analysis • Idle instances • Network analysis
Users • MFA • Roles • Administrator accounts • Access keys
Recent events • User activity • Security Group changes • IAM changes • Deleted resources
AWS spending • Service costs • Forecasting • Cost spikes • Idle resources
Pods • Deployments • Logs • Events • Node health
Managed instances • System information • Patch compliance • Inventory • Operations
These seven domains are the core architecture presented throughout the walkthrough.
The walkthrough teaches the architecture step by step:
Claude
↓
MCP Tool
↓
Service Layer
↓
boto3
↓
AWS API
↓
AWS Infrastructure
The guide deliberately separates the Claude-facing tool layer from the AWS service layer, so you understand what talks to Claude and what talks to AWS.
You'll start with a simple FastMCP application and learn how a Python function becomes an MCP tool using @mcp.tool().
You don't begin with seven complicated projects.
You begin with a simple MCP server.
Then the same pattern becomes reusable.
First server
↓
AWS integration
↓
Real AWS tool
↓
Infrastructure MCP
↓
CloudWatch
↓
IAM
↓
CloudTrail
↓
Cost Explorer
↓
EKS
↓
SSM
↓
That progression is intentional. Once you understand the first server, the later chapters reuse the same basic structure while changing the AWS service being accessed.
Imagine asking:
Claude can use different MCP servers to investigate different parts of the problem:
CloudWatch MCP
→ Metrics, logs and alarms
↓
EKS MCP
→ Pods, deployments and events
↓
AWS Labs MCP
→ EC2 and infrastructure
↓
CloudTrail MCP
→ Recent changes
↓
Combines the evidence into an investigation.
The walkthrough demonstrates this multi-server orchestration concept directly. Each server stays focused while Claude combines their outputs.
This is the moment the project stops being:
“I built an MCP demo.”
and becomes:
“I built an AI-powered DevOps assistant.”
You won't simply copy commands without understanding them.
You'll understand:
The guide explains the MCP handshake and shows the flow from Claude starting the server through tool discovery and execution.
Seven independent servers covering the major AWS DevOps domains in the guide.
A broad collection of practical tools across infrastructure, observability, security, auditing, billing, Kubernetes and operations.
Connect all seven servers to Claude and let it discover and use their tools.
See how multiple servers can contribute evidence to investigate an actual production-style incident.
Move beyond local execution into Docker and Docker Compose with logging, caching, multi-account considerations and rate limiting.
AI connected to infrastructure needs careful permissions.
The guide explicitly avoids the lazy approach of simply granting AdministratorAccess and instead follows least-privilege permissions for the different servers.
You'll also see how infrastructure-changing operations should be restricted and explicitly confirmed rather than exposing arbitrary command execution.
The project doesn't end after Claude successfully answers:
“Hello Arvind.”
You'll also learn how to organize the seven servers as independent projects and containerize them with Docker.
Each server gets its own lifecycle, making it possible to develop, test, deploy and update them independently.
Build AI-powered tools around the AWS workflows you already understand.
Learn how AI can interact with real AWS infrastructure.
Bring EKS operations into an MCP-powered workflow.
Explore AI-assisted investigation and operational workflows.
Go beyond definitions and actually build working servers.
Learn a reusable pattern for connecting AI to external systems.
Because the goal isn't:
“Understand MCP.”
The goal is:
“Build something with MCP.”
You don't have to invent the architecture.
You don't have to decide which AWS APIs to start with.
You don't have to figure out how Claude discovers your tools.
You don't have to guess how seven servers connect.
The walkthrough takes you through the entire progression.
Python
↓
FastMCP
↓
First MCP Tool
↓
AWS + boto3
AWS Infrastructure MCP
↓
CloudWatch MCP
↓
IAM MCP
↓
CloudTrail MCP
↓
Cost Explorer MCP
↓
EKS MCP
↓
SSM MCP
7 MCP Servers
↓
Claude Desktop
↓
Tool Discovery
↓
Multi-server Orchestration
Docker
↓
Production Deployment
↓
Security Hardening
📘 Complete from-scratch walkthrough
☁️ 7 AWS MCP Servers
🛠️ 60+ practical tools
🤖 Claude Desktop integration
🐍 Python + FastMCP + boto3
☸️ EKS/Kubernetes operations
📊 CloudWatch observability
🔐 IAM & CloudTrail security
💰 AWS cost intelligence
🚨 Production incident investigation
🐳 Docker & production deployment
🔒 Security & hardening
Start with a simple server.
Build your first tool.
Connect it to AWS.
Build the remaining six.
Connect everything to Claude.
Then watch your individual tools become a complete AI-powered DevOps assistant.