What changed
AWS added a serverless diagnostic capability to its managed MCP Server. Coding agents can inspect Lambda functions and connected API Gateway, EventBridge, S3, DynamoDB, SNS, SQS and Step Functions resources, correlate errors against a seven-day baseline and reconstruct recent changes.
Why it matters
A single agent tool can now traverse configuration, telemetry and change history across an application boundary, reducing manual correlation while concentrating read authority and audit requirements.
What to do
Connect a least-privilege test role, deny one unrelated resource, reproduce a known Lambda fault and verify the diagnosis, CloudTrail trail, regional data path, token use and revocation before production access.
Caveat
AWS documents availability, not diagnostic accuracy or least-privilege outcomes. The managed server runs in Virginia and Frankfurt, while inspected resources and normal AWS service charges remain subject to account configuration.