awslabs.well-architected-security-mcp-server 0.1.1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. awslabs_well_architected_security_mcp_server-0.1.1/.gitignore +576 -0
  2. awslabs_well_architected_security_mcp_server-0.1.1/.python-version +1 -0
  3. awslabs_well_architected_security_mcp_server-0.1.1/PKG-INFO +258 -0
  4. awslabs_well_architected_security_mcp_server-0.1.1/PROMPT_TEMPLATE.md +134 -0
  5. awslabs_well_architected_security_mcp_server-0.1.1/README.md +240 -0
  6. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/__init__.py +17 -0
  7. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/consts.py +113 -0
  8. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/server.py +1174 -0
  9. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/__init__.py +42 -0
  10. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/network_security.py +1251 -0
  11. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/prompt_utils.py +173 -0
  12. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/resource_utils.py +109 -0
  13. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/security_services.py +1618 -0
  14. awslabs_well_architected_security_mcp_server-0.1.1/awslabs/well_architected_security_mcp_server/util/storage_security.py +1126 -0
  15. awslabs_well_architected_security_mcp_server-0.1.1/pyproject.toml +89 -0
  16. awslabs_well_architected_security_mcp_server-0.1.1/tests/README.md +77 -0
  17. awslabs_well_architected_security_mcp_server-0.1.1/tests/__init__.py +15 -0
  18. awslabs_well_architected_security_mcp_server-0.1.1/tests/conftest.py +567 -0
  19. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_access_analyzer_fix.py +209 -0
  20. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_network_security.py +901 -0
  21. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_network_security_additional.py +1135 -0
  22. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_prompt_utils.py +408 -0
  23. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_prompt_utils_coverage.py +173 -0
  24. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_resource_utils.py +204 -0
  25. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_resource_utils_fix.py +201 -0
  26. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_security_services.py +966 -0
  27. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_security_services_additional.py +512 -0
  28. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_security_services_coverage.py +769 -0
  29. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_server.py +579 -0
  30. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_server_additional.py +551 -0
  31. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_server_coverage.py +116 -0
  32. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_server_prompts.py +117 -0
  33. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_server_security_findings.py +672 -0
  34. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_storage_security.py +541 -0
  35. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_storage_security_additional.py +597 -0
  36. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_storage_security_comprehensive.py +361 -0
  37. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_storage_security_edge_cases.py +593 -0
  38. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_storage_security_recommendations.py +172 -0
  39. awslabs_well_architected_security_mcp_server-0.1.1/tests/test_user_agent_config.py +137 -0
  40. awslabs_well_architected_security_mcp_server-0.1.1/uv.lock +741 -0
@@ -0,0 +1,576 @@
1
+ # Created by https://www.toptal.com/developers/gitignore/api/linux,python,windows,macOS,VisualStudioCode
2
+ # Edit at https://www.toptal.com/developers/gitignore?templates=linux,python,windows,macOS,VisualStudioCode
3
+
4
+ ### Linux ###
5
+ *~
6
+
7
+ # temporary files which can be created if a process still has a handle open of a deleted file
8
+ .fuse_hidden*
9
+
10
+ # KDE directory preferences
11
+ .directory
12
+
13
+ # Linux trash folder which might appear on any partition or disk
14
+ .Trash-*
15
+
16
+ # .nfs files are created when an open file is removed but is still being accessed
17
+ .nfs*
18
+
19
+ ### macOS ###
20
+ # General
21
+ .DS_Store
22
+ .AppleDouble
23
+ .LSOverride
24
+
25
+ # Icon must end with two \r
26
+ Icon
27
+
28
+
29
+ # Thumbnails
30
+ ._*
31
+
32
+ # Files that might appear in the root of a volume
33
+ .DocumentRevisions-V100
34
+ .fseventsd
35
+ .Spotlight-V100
36
+ .TemporaryItems
37
+ .Trashes
38
+ .VolumeIcon.icns
39
+ .com.apple.timemachine.donotpresent
40
+
41
+ # Directories potentially created on remote AFP share
42
+ .AppleDB
43
+ .AppleDesktop
44
+ Network Trash Folder
45
+ Temporary Items
46
+ .apdisk
47
+
48
+ ### macOS Patch ###
49
+ # iCloud generated files
50
+ *.icloud
51
+
52
+ ### Python ###
53
+ # Byte-compiled / optimized / DLL files
54
+ __pycache__/
55
+ *.py[cod]
56
+ *$py.class
57
+
58
+ # C extensions
59
+ *.so
60
+
61
+ # Distribution / packaging
62
+ .Python
63
+ build/
64
+ develop-eggs/
65
+ dist/
66
+ downloads/
67
+ eggs/
68
+ .eggs/
69
+ lib/
70
+ lib64/
71
+ parts/
72
+ sdist/
73
+ var/
74
+ wheels/
75
+ share/python-wheels/
76
+ *.egg-info/
77
+ .installed.cfg
78
+ *.egg
79
+ MANIFEST
80
+
81
+ # PyInstaller
82
+ # Usually these files are written by a python script from a template
83
+ # before PyInstaller builds the exe, so as to inject date/other infos into it.
84
+ *.manifest
85
+ *.spec
86
+
87
+ # Installer logs
88
+ pip-log.txt
89
+ pip-delete-this-directory.txt
90
+
91
+ # Unit test / coverage reports
92
+ htmlcov/
93
+ .tox/
94
+ .nox/
95
+ .coverage
96
+ .coverage.*
97
+ .cache
98
+ nosetests.xml
99
+ coverage.xml
100
+ *.cover
101
+ *.py,cover
102
+ .hypothesis/
103
+ .pytest_cache/
104
+ cover/
105
+
106
+ # Translations
107
+ *.mo
108
+ *.pot
109
+
110
+ # Django stuff:
111
+ *.log
112
+ local_settings.py
113
+ db.sqlite3
114
+ db.sqlite3-journal
115
+
116
+ # Flask stuff:
117
+ instance/
118
+ .webassets-cache
119
+
120
+ # Scrapy stuff:
121
+ .scrapy
122
+
123
+ # Sphinx documentation
124
+ docs/_build/
125
+
126
+ # PyBuilder
127
+ .pybuilder/
128
+ target/
129
+
130
+ # Jupyter Notebook
131
+ .ipynb_checkpoints
132
+
133
+ # IPython
134
+ profile_default/
135
+ ipython_config.py
136
+
137
+ # pyenv
138
+ # For a library or package, you might want to ignore these files since the code is
139
+ # intended to run in multiple environments; otherwise, check them in:
140
+ # .python-version
141
+
142
+ # pipenv
143
+ # According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
144
+ # However, in case of collaboration, if having platform-specific dependencies or dependencies
145
+ # having no cross-platform support, pipenv may install dependencies that don't work, or not
146
+ # install all needed dependencies.
147
+ #Pipfile.lock
148
+
149
+ # poetry
150
+ # Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
151
+ # This is especially recommended for binary packages to ensure reproducibility, and is more
152
+ # commonly ignored for libraries.
153
+ # https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
154
+ #poetry.lock
155
+
156
+ # pdm
157
+ # Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
158
+ #pdm.lock
159
+ # pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
160
+ # in version control.
161
+ # https://pdm.fming.dev/#use-with-ide
162
+ .pdm.toml
163
+
164
+ # PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
165
+ __pypackages__/
166
+
167
+ # Celery stuff
168
+ celerybeat-schedule
169
+ celerybeat.pid
170
+
171
+ # SageMath parsed files
172
+ *.sage.py
173
+
174
+ # Environments
175
+ .env
176
+ .venv
177
+ env/
178
+ venv/
179
+ ENV/
180
+ env.bak/
181
+ venv.bak/
182
+ .direnv/
183
+
184
+ # Certificates
185
+ awslabs/certs
186
+
187
+ # Spyder project settings
188
+ .spyderproject
189
+ .spyproject
190
+
191
+ # Rope project settings
192
+ .ropeproject
193
+
194
+ # mkdocs documentation
195
+ /site
196
+
197
+ # mypy
198
+ .mypy_cache/
199
+ .dmypy.json
200
+ dmypy.json
201
+
202
+ # Pyre type checker
203
+ .pyre/
204
+
205
+ # pytype static type analyzer
206
+ .pytype/
207
+
208
+ # Cython debug symbols
209
+ cython_debug/
210
+
211
+ # PyCharm
212
+ # JetBrains specific template is maintained in a separate JetBrains.gitignore that can
213
+ # be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
214
+ # and can be added to the global gitignore or merged into this file. For a more nuclear
215
+ # option (not recommended) you can uncomment the following to ignore the entire idea folder.
216
+ #.idea/
217
+
218
+ ### Python Patch ###
219
+ # Poetry local configuration file - https://python-poetry.org/docs/configuration/#local-configuration
220
+ poetry.toml
221
+
222
+ # ruff
223
+ .ruff_cache/
224
+
225
+ # LSP config files
226
+ pyrightconfig.json
227
+
228
+ ### VisualStudioCode ###
229
+ .vscode/*
230
+ !.vscode/settings.json
231
+ !.vscode/tasks.json
232
+ !.vscode/launch.json
233
+ !.vscode/extensions.json
234
+ !.vscode/*.code-snippets
235
+
236
+ # Local History for Visual Studio Code
237
+ .history/
238
+
239
+ # Built Visual Studio Code Extensions
240
+ *.vsix
241
+
242
+ ### VisualStudioCode Patch ###
243
+ # Ignore all local history of files
244
+ .history
245
+ .ionide
246
+
247
+ ### Kiro
248
+ # Ignore Kiro config files
249
+ .kiro/
250
+
251
+ ### Windows ###
252
+ # Windows thumbnail cache files
253
+ Thumbs.db
254
+ Thumbs.db:encryptable
255
+ ehthumbs.db
256
+ ehthumbs_vista.db
257
+
258
+ # Dump file
259
+ *.stackdump
260
+
261
+ # Folder config file
262
+ [Dd]esktop.ini
263
+
264
+ # Recycle Bin used on file shares
265
+ $RECYCLE.BIN/
266
+
267
+ # Windows Installer files
268
+ *.cab
269
+ *.msi
270
+ *.msix
271
+ *.msm
272
+ *.msp
273
+
274
+ # Windows shortcuts
275
+ *.lnk
276
+
277
+ # End of https://www.toptal.com/developers/gitignore/api/linux,python,windows,macOS,VisualStudioCode
278
+
279
+ # Created by https://www.toptal.com/developers/gitignore/api/jetbrains+all,pycharm+all,node
280
+ # Edit at https://www.toptal.com/developers/gitignore?templates=jetbrains+all,pycharm+all,node
281
+
282
+ ### JetBrains+all ###
283
+ # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider
284
+ # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
285
+
286
+ # User-specific stuff
287
+ .idea/**/workspace.xml
288
+ .idea/**/tasks.xml
289
+ .idea/**/usage.statistics.xml
290
+ .idea/**/dictionaries
291
+ .idea/**/shelf
292
+
293
+ # AWS User-specific
294
+ .idea/**/aws.xml
295
+
296
+ # Generated files
297
+ .idea/**/contentModel.xml
298
+
299
+ # Sensitive or high-churn files
300
+ .idea/**/dataSources/
301
+ .idea/**/dataSources.ids
302
+ .idea/**/dataSources.local.xml
303
+ .idea/**/sqlDataSources.xml
304
+ .idea/**/dynamic.xml
305
+ .idea/**/uiDesigner.xml
306
+ .idea/**/dbnavigator.xml
307
+
308
+ # Gradle
309
+ .idea/**/gradle.xml
310
+ .idea/**/libraries
311
+
312
+ # Gradle and Maven with auto-import
313
+ # When using Gradle or Maven with auto-import, you should exclude module files,
314
+ # since they will be recreated, and may cause churn. Uncomment if using
315
+ # auto-import.
316
+ # .idea/artifacts
317
+ # .idea/compiler.xml
318
+ # .idea/jarRepositories.xml
319
+ # .idea/modules.xml
320
+ # .idea/*.iml
321
+ # .idea/modules
322
+ # *.iml
323
+ # *.ipr
324
+
325
+ # CMake
326
+ cmake-build-*/
327
+
328
+ # Mongo Explorer plugin
329
+ .idea/**/mongoSettings.xml
330
+
331
+ # File-based project format
332
+ *.iws
333
+
334
+ # IntelliJ
335
+ out/
336
+
337
+ # mpeltonen/sbt-idea plugin
338
+ .idea_modules/
339
+
340
+ # JIRA plugin
341
+ atlassian-ide-plugin.xml
342
+
343
+ # Cursive Clojure plugin
344
+ .idea/replstate.xml
345
+
346
+ # SonarLint plugin
347
+ .idea/sonarlint/
348
+
349
+ # Crashlytics plugin (for Android Studio and IntelliJ)
350
+ com_crashlytics_export_strings.xml
351
+ crashlytics.properties
352
+ crashlytics-build.properties
353
+ fabric.properties
354
+
355
+ # Editor-based Rest Client
356
+ .idea/httpRequests
357
+
358
+ # Android studio 3.1+ serialized cache file
359
+ .idea/caches/build_file_checksums.ser
360
+
361
+ ### JetBrains+all Patch ###
362
+ # Ignore everything but code style settings and run configurations
363
+ # that are supposed to be shared within teams.
364
+
365
+ .idea/*
366
+
367
+ !.idea/codeStyles
368
+ !.idea/runConfigurations
369
+
370
+ ### Node ###
371
+ # Logs
372
+ logs
373
+ *.log
374
+ npm-debug.log*
375
+ yarn-debug.log*
376
+ yarn-error.log*
377
+ lerna-debug.log*
378
+ .pnpm-debug.log*
379
+
380
+ # Diagnostic reports (https://nodejs.org/api/report.html)
381
+ report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
382
+
383
+ # Runtime data
384
+ pids
385
+ *.pid
386
+ *.seed
387
+ *.pid.lock
388
+
389
+ # Directory for instrumented libs generated by jscoverage/JSCover
390
+ lib-cov
391
+
392
+ # Coverage directory used by tools like istanbul
393
+ coverage
394
+ *.lcov
395
+
396
+ # nyc test coverage
397
+ .nyc_output
398
+
399
+ # Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
400
+ .grunt
401
+
402
+ # Bower dependency directory (https://bower.io/)
403
+ bower_components
404
+
405
+ # node-waf configuration
406
+ .lock-wscript
407
+
408
+ # Compiled binary addons (https://nodejs.org/api/addons.html)
409
+ build/Release
410
+
411
+ # Dependency directories
412
+ node_modules/
413
+ jspm_packages/
414
+
415
+ # Snowpack dependency directory (https://snowpack.dev/)
416
+ web_modules/
417
+
418
+ # TypeScript cache
419
+ *.tsbuildinfo
420
+
421
+ # Optional npm cache directory
422
+ .npm
423
+
424
+ # Optional eslint cache
425
+ .eslintcache
426
+
427
+ # Optional stylelint cache
428
+ .stylelintcache
429
+
430
+ # Microbundle cache
431
+ .rpt2_cache/
432
+ .rts2_cache_cjs/
433
+ .rts2_cache_es/
434
+ .rts2_cache_umd/
435
+
436
+ # Optional REPL history
437
+ .node_repl_history
438
+
439
+ # Output of 'npm pack'
440
+ *.tgz
441
+
442
+ # Yarn Integrity file
443
+ .yarn-integrity
444
+
445
+ # dotenv environment variable files
446
+ .env
447
+ .env.development.local
448
+ .env.test.local
449
+ .env.production.local
450
+ .env.local
451
+
452
+ # parcel-bundler cache (https://parceljs.org/)
453
+ .cache
454
+ .parcel-cache
455
+
456
+ # Next.js build output
457
+ .next
458
+ out
459
+
460
+ # Nuxt.js build / generate output
461
+ .nuxt
462
+ dist
463
+
464
+ # Gatsby files
465
+ .cache/
466
+ # Comment in the public line in if your project uses Gatsby and not Next.js
467
+ # https://nextjs.org/blog/next-9-1#public-directory-support
468
+ # public
469
+
470
+ # vuepress build output
471
+ .vuepress/dist
472
+
473
+ # vuepress v2.x temp and cache directory
474
+ .temp
475
+
476
+ # Docusaurus cache and generated files
477
+ .docusaurus
478
+
479
+ # Serverless directories
480
+ .serverless/
481
+
482
+ # FuseBox cache
483
+ .fusebox/
484
+
485
+ # DynamoDB Local files
486
+ .dynamodb/
487
+
488
+ # TernJS port file
489
+ .tern-port
490
+
491
+ # Stores VSCode versions used for testing VSCode extensions
492
+ .vscode-test
493
+
494
+ # yarn v2
495
+ .yarn/cache
496
+ .yarn/unplugged
497
+ .yarn/build-state.yml
498
+ .yarn/install-state.gz
499
+ .pnp.*
500
+
501
+ ### Node Patch ###
502
+ # Serverless Webpack directories
503
+ .webpack/
504
+
505
+ # Optional stylelint cache
506
+
507
+ # SvelteKit build / generate output
508
+ .svelte-kit
509
+
510
+ ### PyCharm+all ###
511
+ # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider
512
+ # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
513
+
514
+ # User-specific stuff
515
+
516
+ # AWS User-specific
517
+
518
+ # Generated files
519
+
520
+ # Sensitive or high-churn files
521
+
522
+ # Gradle
523
+
524
+ # Gradle and Maven with auto-import
525
+ # When using Gradle or Maven with auto-import, you should exclude module files,
526
+ # since they will be recreated, and may cause churn. Uncomment if using
527
+ # auto-import.
528
+ # .idea/artifacts
529
+ # .idea/compiler.xml
530
+ # .idea/jarRepositories.xml
531
+ # .idea/modules.xml
532
+ # .idea/*.iml
533
+ # .idea/modules
534
+ # *.iml
535
+ # *.ipr
536
+
537
+ # CMake
538
+
539
+ # Mongo Explorer plugin
540
+
541
+ # File-based project format
542
+
543
+ # IntelliJ
544
+
545
+ # mpeltonen/sbt-idea plugin
546
+
547
+ # JIRA plugin
548
+
549
+ # Cursive Clojure plugin
550
+
551
+ # SonarLint plugin
552
+
553
+ # Crashlytics plugin (for Android Studio and IntelliJ)
554
+
555
+ # Editor-based Rest Client
556
+
557
+ # Android studio 3.1+ serialized cache file
558
+
559
+ ### PyCharm+all Patch ###
560
+ # Ignore everything but code style settings and run configurations
561
+ # that are supposed to be shared within teams.
562
+
563
+
564
+
565
+ # End of https://www.toptal.com/developers/gitignore/api/jetbrains+all,pycharm+all,node
566
+ samples/mcp-integration-with-nova-canvas/output/*
567
+
568
+ memory-bank/*
569
+ .clinerules
570
+
571
+ # OpenAPI MCP Server specific ignores
572
+ src/openapi-mcp-server/generated-diagrams/*
573
+ src/openapi-mcp-server/*.txt
574
+ src/openapi-mcp-server/*-coverage.xml
575
+ src/openapi-mcp-server/junit.xml
576
+ executive-summary.md