{"slug": "aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is", "title": "aws:ViaAWSMCPService Is Not a Containment Boundary. Here Is What It Is", "summary": "AWS released its MCP Server, part of the Agent Toolkit for AWS, into general availability on May 6, 2026, introducing two global IAM condition keys that let a single role carry different permissions depending on whether a human or an agent initiated the call. A developer examining the service argues it is a provenance primitive rather than a containment boundary, noting the same credentials can be read-write for a user and read-only for an agent. The server itself is free, with costs limited to the AWS resources touched and CloudTrail management events.", "body_md": "Service: AWS MCP Server (part of Agent Toolkit for AWS), GA May 6 2026. No charge for the server, you pay only for resources you touch.\n\nWhy it fits you specifically: your agent is Claude Code, which you already have on subscription. No Bedrock inference, no ANTHROPIC_API_KEY, no Agent SDK. The AI half of the demo is free. The AWS half is CloudTrail management events and IAM policy, also free. This is a near zero cost blog post.\n\nThe thesis: AWS shipped a provenance primitive in IAM. Two global condition keys, confirmed in the Agent Toolkit IAM docs:\n\nSo the same IAM role can be read-write when you use it and read-only when your agent uses it. Same credentials, different authorization, decided by who initiated the call. That is the demo, and it photographs well.", "url": "https://wpnews.pro/news/aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is", "canonical_source": "https://dev.to/raghureddycloud/awsviaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is-584h", "published_at": "2026-11-11 10:42:19+00:00", "updated_at": "2026-11-11 10:52:27.639557+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-infrastructure", "ai-tools"], "entities": ["AWS", "AWS MCP Server", "Agent Toolkit for AWS", "IAM", "CloudTrail", "Claude Code"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is", "markdown": "https://wpnews.pro/news/aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is.md", "text": "https://wpnews.pro/news/aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is.txt", "jsonld": "https://wpnews.pro/news/aws-viaawsmcpservice-is-not-a-containment-boundary-here-is-what-it-is.jsonld"}}