aws--agent-toolkit-for-aws/plugins/aws-core/hooks/hooks.json

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/secret-safety.py\"",
            "timeout": 5
          }
        ]
      },
      {
        "matcher": "use_aws|mcp__aws.*|mcp__plugin_.*aws-mcp.*",
        "hooks": [
          {
            "type": "command",
            "command": "python3 \"${CLAUDE_PLUGIN_ROOT}/hooks/secret-safety.py\"",
            "timeout": 5
          }
        ]
      }
    ]
  }
}