AWS API
Call allow-listed AWS services with Signature Version 4
Connect AWS API for bounded calls to DynamoDB, Lambda, CloudWatch Logs, and Bedrock Runtime. Swarmz constructs the regional endpoint and signs each request; callers cannot supply an arbitrary host.
Connect AWS API
Create an IAM principal with only the actions and resources the app needs. In Settings > Integrations, select AWS API, then enter the access key ID, secret access key, optional session token, and AWS region.
The single call_api operation accepts only the supported service, action, region, and bounded JSON payload.
Example prompt:
Use AWS API to invoke the order-summary Lambda in eu-west-1 with this order ID. Do not call any other function.
Verify and recover
Use a read-only or disposable test action, then confirm the request in CloudTrail. For temporary credentials, also confirm the session token expires when expected.
If AWS denies the call, check the region, session expiry, IAM action, and resource ARN. Disable or rotate exposed AWS credentials immediately, then replace the connection. Disconnecting Swarmz does not revoke the IAM key.