Metadata-Version: 2.4
Name: aws-india-compliance
Version: 0.6.2
Summary: MCP server to assess AWS infrastructure against regulatory compliance frameworks
Project-URL: Homepage, https://github.com/aws-samples/sample-aws-india-compliance-mcp
Project-URL: Repository, https://github.com/aws-samples/sample-aws-india-compliance-mcp
Project-URL: Issues, https://github.com/aws-samples/sample-aws-india-compliance-mcp/issues
Project-URL: Documentation, https://github.com/aws-samples/sample-aws-india-compliance-mcp#readme
Author-email: Paramanand Mallik <paramanandmallik@gmail.com>
License-Expression: Apache-2.0
License-File: LICENSE
Keywords: aws,compliance,data-protection,dpdp,india,mcp,rbi,regulatory,sebi
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Financial and Insurance Industry
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries
Classifier: Typing :: Typed
Requires-Python: >=3.10
Requires-Dist: boto3>=1.26.0
Requires-Dist: defusedxml>=0.7.1
Requires-Dist: mcp>=1.23.0
Requires-Dist: python-docx>=1.0.0
Requires-Dist: pyyaml>=6.0
Description-Content-Type: text/markdown

# AWS Compliance MCP Server

[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![AWS](https://img.shields.io/badge/AWS-Samples-orange)](https://github.com/aws-samples)
[![MCP](https://img.shields.io/badge/MCP-Server-green)](https://modelcontextprotocol.io)
[![Python](https://img.shields.io/badge/Python-3.10+-yellow)](https://python.org)
[![PyPI](https://img.shields.io/pypi/v/aws-india-compliance)](https://pypi.org/project/aws-india-compliance/)
[![Tests](https://img.shields.io/badge/tests-28%20passing-brightgreen)]()

**Full documentation: https://aws-samples.github.io/sample-aws-india-compliance-mcp/**

An MCP server that assesses AWS infrastructure against regulatory compliance frameworks. Works with Kiro, Claude Desktop, Cursor, or any MCP-compatible client.

**Supported frameworks:**

<!-- FRAMEWORKS_START -->
- **CERT-In Directions on Information Security Practices 2022**
- **Digital Personal Data Protection Act 2023 + Rules 2025**
- **IRDAI Information and Cyber Security Guidelines 2023**
- **RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices**
- **SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) / Cloud Framework**
<!-- FRAMEWORKS_END -->

**Important:** This tool provides automated assessment guidance based on published regulatory frameworks. It does not constitute legal advice or compliance certification. Organizations should consult qualified compliance and legal professionals for definitive regulatory compliance determinations.

**Cost notice:** The MCP server performs read-only API calls at no additional charge beyond standard AWS API request pricing. However, deploying conformance packs generated by this tool creates AWS Config rules, which may incur [AWS Config pricing](https://aws.amazon.com/config/pricing/) charges.

## Quick Start

No installation required. Add to your MCP client config and `uvx` handles the rest:

```json
{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"]
    }
  }
}
```

If you use a named AWS profile:

```json
{
  "mcpServers": {
    "aws-india-compliance": {
      "command": "uvx",
      "args": ["aws-india-compliance@latest"],
      "env": {
        "AWS_PROFILE": "my-sso-profile"
      }
    }
  }
}
```

Add the config to your MCP client's settings file:
- **Kiro**: `.kiro/settings/mcp.json`
- **Claude Desktop**: `claude_desktop_config.json`
- **Claude Code**: `~/.claude/mcp.json`

**Requires [`uv`](https://docs.astral.sh/uv/getting-started/installation/) installed. On macOS: `brew install uv`**

## Verify

Ask your MCP client:

> "List the DPDP control domains"

If it returns 10 domains, you are set. Then:

> "Scan my AWS account in ap-south-1 for DPDP and RBI compliance"

## Tools (8)

| Tool | Purpose |
|------|---------|
| `scan_aws_account` | Scan resources via AWS Config, assess against all frameworks |
| `scan_control_tower` | Enumerate guardrails across OUs, recommend missing ones |
| `get_compliance_gaps` | Drill into gaps with filtering and pagination |
| `search_regulatory_text` | Search regulatory text from government sources |
| `list_control_domains` | List domains for any registered framework |
| `generate_conformance_pack` | Generate deployable AWS Config conformance pack |
| `format_report` | Generate DOCX or Markdown compliance report |
| `submit_feedback` | Submit bugs, suggestions, or missing capabilities |

## Sample Prompts

| What you want to do | Example prompt |
|---------------------|----------------|
| Scan a single account | "Scan my AWS account in ap-south-1 for DPDP and RBI compliance" |
| Scan specific frameworks | "Scan my account using frameworks dpdp,rbi,irdai" |
| Scan all frameworks | "Scan my account using frameworks=all" |
| Scan your organization | "Scan my AWS organization for compliance" |
| Drill into gaps | "Show me all critical DPDP gaps" |
| Assess Control Tower | "Scan my Control Tower and check guardrail coverage" |
| Generate conformance pack | "Generate an AWS Config conformance pack for RBI" |
| Generate report | "Format my last scan as a Word document" |

## Contributing a New Framework

Each compliance framework is defined in a single YAML file. No Python code changes needed.

```bash
python scripts/scaffold_framework.py --new --id gdpr --name "EU GDPR" --source-url "https://gdpr-info.eu"
python scripts/scaffold_framework.py --suggest-checks src/aws_india_compliance/frameworks/gdpr.yaml
python scripts/scaffold_framework.py --validate src/aws_india_compliance/frameworks/gdpr.yaml
```

See [CONTRIBUTING_FRAMEWORKS.md](CONTRIBUTING_FRAMEWORKS.md) for the full guide.

## Documentation

Full documentation is available in the [docs/](docs/) directory:

- [Getting Started](docs/getting-started.md) - Installation, credentials, environment variables
- [Tools Reference](docs/tools.md) - All tools with parameters and examples
- [Frameworks](docs/frameworks/index.md) - Supported frameworks with domain details
- [Architecture](docs/architecture.md) - How scanning and assessment works
- [Security](docs/security.md) - Transport, validation, IAM policy

## Prerequisites

- Python 3.10+
- AWS Config recorder enabled in target accounts/regions
- IAM credentials with read-only access ([minimum IAM policy](docs/security.md#minimum-iam-policy) uses only 20 actions with explicit Deny on destructive operations)
- For org-wide scans: a Config Aggregator

## Tests

```bash
PYTHONPATH=src python3 -m pytest tests/ -v
```

## License

Apache 2.0

**Disclaimer:** This is a sample tool for educational and assessment purposes. It performs read-only operations and does not modify AWS resources. Users should validate compliance findings against their specific regulatory requirements and consult qualified compliance professionals.
