{"data":{"id":"eb3277bb-b8d4-4800-b39b-d6d1fd49fa78","title":"Introducing OAuth Support for AWS MCP Server","summary":"AWS has added OAuth support to its MCP Server (Model Context Protocol, a standard for connecting AI agents to external tools), allowing AI agents like Claude to access AWS services using the same login methods you'd use for the AWS console or command line. The service includes new security features like token revocation, dynamic client registration, and new audit logging in AWS CloudTrail (AWS's service that records all actions taken in your AWS account).","solution":"To set up OAuth for the AWS MCP Server, attach the managed policy 'AWSMCPSignInOAuthAccessPolicy' to your IAM role using the AWS CLI command: aws iam attach-role-policy --role-name <MyRole> --policy-arn arn:aws:iam::aws:policy/AWSMCPSignInOAuthAccessPolicy. Then add the MCP Server endpoint to your agent's configuration using: claude mcp add --transport http aws-mcp https://aws-mcp.us-east-1.api.aws/mcp. When the agent first needs access, it will open a browser for you to authenticate and approve the authorization request.","labels":["security"],"sourceUrl":"https://aws.amazon.com/blogs/security/introducing-oauth-support-for-aws-mcp-server/","publishedAt":"2026-07-09T23:43:47.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedVendors":["Amazon","Anthropic","Google"],"affectedVendorsRaw":["AWS","Claude","Anthropic","Google Gemini","Kiro","Codex"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-09T23:43:47.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}