Overview
Theaws-research command performs AWS-specific technology research using the AWS Knowledge MCP server to match project requirements to AWS services, architecture patterns, Well-Architected Framework guidance, Security Hub controls, and UK Government compliance.
Usage
How It Works
This command delegates to the arckit-aws-research agent which runs as an autonomous subprocess. The agent makes 15-30+ MCP calls to gather authoritative AWS documentation:- Reads project requirements - Extracts AWS service needs from functional/non-functional requirements
- Identifies AWS categories - Compute, data, integration, security, AI/ML, networking
- Uses MCP tools to research each category:
search_documentation- Find relevant AWS services and patternsread_documentation- Extract detailed service informationget_regional_availability- Check eu-west-2 (London) availabilityrecommend- Get AWS-recommended architecture patterns
- Well-Architected assessment - Maps to 6 pillars (Operational Excellence, Security, Reliability, Performance, Cost, Sustainability)
- Security Hub mapping - Identifies security controls and compliance requirements
- UK Government compliance - G-Cloud, data residency, NCSC alignment
- Cost estimation - Monthly AWS costs with optimization strategies
- Generates architecture diagram - Mermaid diagram of AWS services
- Writes research document - Saves to
projects/{project}/research/ARC-{PROJECT_ID}-AWRS-v1.0.md
AWS Knowledge MCP Server
The research agent uses the AWS Knowledge MCP server for authoritative AWS data:MCP Tools Used
search_documentation- Searches AWS documentation for services matching requirements
- Example: “serverless compute options for Node.js”
- Returns: Lambda, Fargate, App Runner service docs
- Fetches detailed AWS service documentation
- Example: Read Lambda pricing, limits, features
- Returns: Full service specifications
- Checks service availability in specific regions
- Example: Check if Amazon Bedrock available in eu-west-2
- Returns: Service availability, regional constraints
- Gets AWS architecture pattern recommendations
- Example: “Three-tier web application pattern”
- Returns: Reference architectures, best practices
Standalone Mode (Without MCP)
If MCP tools are unavailable, the agent falls back to:- WebSearch with
site:docs.aws.amazon.com - WebFetch on AWS documentation URLs
- Manual architecture pattern extraction
Output
The command generates:AWS Research Document
projects/{project}/research/ARC-{PROJECT_ID}-AWRS-v1.0.md containing:
- AWS services recommended per category (compute, data, integration, security, AI/ML)
- Architecture pattern and reference from AWS Architecture Center
- Well-Architected assessment - Alignment to 6 pillars
- Security alignment - Security Hub controls, compliance
- UK Government suitability - G-Cloud status, eu-west-2 availability, data classification
- Estimated monthly cost - With Reserved Instances, Savings Plans, Spot optimization
- Mermaid architecture diagram - Visual representation of AWS services
- Next steps - Recommended follow-up commands
Summary
The agent returns a concise summary including:- AWS services by category
- Architecture pattern name
- Security and compliance status
- UK Government suitability assessment
- Estimated monthly cost range
AWS Service Categories
Compute
- AWS Lambda - Serverless functions
- AWS Fargate - Serverless containers
- Amazon EC2 - Virtual machines
- Amazon EKS - Kubernetes
- AWS App Runner - Container apps
Data
- Amazon RDS - Relational databases (PostgreSQL, MySQL, Aurora)
- Amazon DynamoDB - NoSQL database
- Amazon S3 - Object storage
- Amazon Redshift - Data warehouse
- Amazon Aurora - Cloud-native database
Integration
- Amazon API Gateway - API management
- Amazon EventBridge - Event bus
- AWS Step Functions - Workflow orchestration
- Amazon SQS - Message queue
- Amazon SNS - Pub/sub notifications
Security
- AWS IAM - Identity and access
- AWS Secrets Manager - Secrets storage
- AWS KMS - Encryption keys
- AWS WAF - Web application firewall
- Amazon Cognito - User authentication
AI/ML
- Amazon Bedrock - Generative AI (LLMs)
- Amazon SageMaker - ML platform
- Amazon Textract - Document analysis
- Amazon Comprehend - NLP
- Amazon Rekognition - Image/video analysis
Well-Architected Framework Assessment
The research document maps AWS services to the 6 pillars:1. Operational Excellence
- Infrastructure as Code (CloudFormation, CDK)
- Monitoring (CloudWatch, X-Ray)
- CI/CD (CodePipeline, CodeBuild)
2. Security
- Encryption at rest and in transit
- IAM least privilege
- Security Hub compliance
- WAF and DDoS protection
3. Reliability
- Multi-AZ deployment
- Auto Scaling
- Backup and disaster recovery
- Health checks and failover
4. Performance Efficiency
- Right-sizing instances
- Caching (CloudFront, ElastiCache)
- Database optimization
- Serverless where appropriate
5. Cost Optimization
- Reserved Instances and Savings Plans
- Spot Instances for batch workloads
- Graviton instances (ARM, 20% cheaper)
- S3 Intelligent-Tiering
6. Sustainability
- Graviton (lower carbon footprint)
- Serverless (efficient compute)
- eu-west-2 (renewable energy region)
UK Government Compliance
For UK Government projects, the research includes:G-Cloud Framework
- AWS is on Digital Marketplace G-Cloud
- Can procure AWS services via G-Cloud
- Supports OFFICIAL and OFFICIAL-SENSITIVE classifications
Data Residency
- eu-west-2 (London) - UK data residency
- Data sovereignty compliance
- Brexit-aligned service agreements
NCSC Alignment
- Cloud Security Principles compliance
- Cyber Essentials Plus certified
- IL3 (Impact Level 3) hosting available
Technology Code of Practice
- Point 5 (Cloud First) - AWS as cloud provider
- Point 6 (Make things secure) - Security Hub, encryption
- Point 11 (Choose the right tools) - G-Cloud procurement
Cost Estimation Example
Architecture Pattern Examples
Three-Tier Web Application
Serverless API
Data Pipeline
Integration with Other Commands
Input from:requirements- RequiresARC-*-REQ-*.mddata- Uses data model for database selection
diagram- Creates AWS-specific architecture diagramssecure- Validates against Secure by Design principlesdevops- Designs AWS CodePipeline CI/CDfinops- Creates AWS cost management strategy
Examples
Example 1: Serverless API Research
- API Gateway vs ALB + Lambda
- DynamoDB vs Aurora Serverless
- Cognito for authentication
- Step Functions for workflows
- Cost comparison vs EC2-based approach
Example 2: Data Platform Research
- S3 data lake architecture
- Glue for ETL
- Athena vs Redshift for analytics
- QuickSight for visualization
- HIPAA-eligible services (BAA required)
- IL3 hosting for NHS data (OFFICIAL-SENSITIVE)
Example 3: AI/ML Research
- Amazon Bedrock (Claude, Titan models)
- SageMaker for custom models
- Textract for document extraction
- eu-west-2 availability (Bedrock limited)
- AI Playbook compliance (if HIGH-RISK AI)
Resources
- AWS Knowledge MCP: https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server
- AWS Architecture Center: https://aws.amazon.com/architecture/
- AWS Well-Architected: https://aws.amazon.com/architecture/well-architected/
- Digital Marketplace (AWS): https://www.digitalmarketplace.service.gov.uk/g-cloud/search?q=amazon+web+services
Next Steps
After completing AWS research:- Create Architecture Diagram -
arckit diagramwith AWS services - Security Review -
arckit secureto validate against Secure by Design - CI/CD Design -
arckit devopsfor AWS CodePipeline - Cost Management -
arckit finopsfor AWS cost optimization strategy - ADR -
arckit adrto record AWS service selection decisions