AWS

AWS Integration

Connect Queue agents to AWS to interact with S3, Lambda, CloudWatch, EC2, and more — letting agents read infrastructure state, trigger functions, and act on cloud resources directly.

Authentication

Queue uses an IAM role with least-privilege policies attached to your workspace. Go to Settings → Integrations → AWS and follow the guided setup to create the IAM role and trust relationship. No long-lived access keys are stored.

Available tools

aws_s3_read

Read the contents of an S3 object by bucket and key. Useful for agents that need to inspect configuration files, logs, or build artifacts stored in S3.

aws_s3_write

Write or overwrite an S3 object. Use this to publish agent-generated outputs — reports, processed data, deployment artifacts — directly to your buckets.

aws_lambda_invoke

Invoke a Lambda function synchronously or asynchronously with a JSON payload. Lets agents trigger serverless workflows or run compute-heavy tasks without managing infrastructure.

aws_cloudwatch_logs

Query CloudWatch Logs Insights or fetch recent log events from a log group. Useful for debugging agents, incident response agents, or any workflow where reading live application logs is essential.

Permissions best practices

Only grant the IAM role permissions for the specific services and actions your agents actually use. Avoid wildcard policies. Review and tighten permissions after your first few agent runs once you know the exact API calls being made.