Subchapter 63.20
references/mcp-setup.mdMarkdown3 KBView on GitHub
This skill PREFERS direct psql execution (via scripts/psql-connect.sh)
for ad-hoc DSQL queries, and the official for AWS knowledge lookups and AWS API
access.
| Need | Use |
|---|---|
| Run an ad-hoc SELECT / DDL / DML against a cluster | scripts/psql-connect.sh |
| Look up DSQL service limits, docs, or skills | AWS MCP Server aws___search_documentation / aws___read_documentation |
Make an AWS API call (dsql:, iam:, etc.) | AWS MCP Server aws___call_aws |
| Run a sandboxed Python script that calls AWS APIs | AWS MCP Server aws___run_script |
| Application code (Python, JS, Java, Go, Rust, etc.) | The language-specific DSQL Connector (opens in a new tab) |
The AWS MCP Server is the canonical AWS knowledge + API integration for coding assistants. It
ships with knowledge tools (aws___search_documentation, aws___read_documentation,
aws___recommend, aws___retrieve_skill, aws___list_regions, aws___get_regional_availability)
and AWS API tools (aws___call_aws, aws___run_script, aws___get_tasks,
aws___get_presigned_url).
See mcp-tools.md for the canonical surface and per-tool detail; the official tool list lives at Understanding the MCP Server tools (opens in a new tab).
Setup: Follow the official guide at Setting up the AWS MCP Server (opens in a new tab). The setup steps differ per coding assistant (Claude Code, Gemini, Codex, Kiro, etc.) — defer to the AWS docs page rather than caching invocation details here.
After installation, this skill will use aws___search_documentation to verify DSQL service limits
on demand (see the limit table in SKILL.md).
Whichever path you use:
aws dsql generate-db-connect-auth-token expire after 15 minutes — never
persist them, regenerate per sessiongenerate-db-connect-admin-auth-token for cluster setup, role grants, and DDL; use
the scoped variant for app workloadssslmode=verify-full (or at minimum require) — DSQL rejects non-TLS connectionsFor end-to-end credential and connection guidance, see authentication-guide.md.