One Tool Call Away From a $10,000 AWS Bill (opens in new tab)

It's 2 AM. Your coding agent is refactoring a microservice. It decides the best path forward is to "clean up" the staging environment — deletes three S3 buckets, tears down a CloudFormation stack, and spins up eight m5.4xlarge instances to "run integration tests faster." By morning, the bill is north of $10,000. The agent wasn't malicious. It was helpful. That's what makes it dangerous. The AWS MCP server from AWS Labs gives agents direct access to 55 tools spanning EC2, S3, Lambda, DynamoDB,...