Official Source· AWS Artificial Intelligence· AI· Published Oct 7, 2026

AWS Shows an Approval-Gated Remediation Workflow for DevOps Agent Investigations

AWS describes a workflow combining Amazon EventBridge, AWS Lambda Durable Functions, and Amazon Bedrock to turn AWS DevOps Agent investigation results into proposed fixes. Read-only tools can run automatically, while infrastructure changes pause for human approval.

AWS Shows an Approval-Gated Remediation Workflow for DevOps Agent Investigations

Full Report

In a technical post dated October 7, 2026, Michele Scarimbolo outlines a way to turn AWS DevOps Agent investigation summaries into reviewable remediation steps. After an investigation completes, Amazon EventBridge triggers a function with the investigation content. The durable function passes that context to Amazon Bedrock, which identifies possible remediations using a curated tool allowlist.

The workflow separates read-only actions from infrastructure changes: read-only tools can run autonomously, while infrastructure changes pause for a person to approve or reject. The durable function can checkpoint its progress and wait without consuming compute resources, then resume when it receives an approval signal. The article’s Lambda timeout example starts with a test function set to three seconds; Amazon Bedrock proposes 30 seconds, and the workflow applies the change after approval. AWS says additional remediation capabilities can be added by updating the tool registry configuration rather than changing orchestrator code.

Why This Matters

The design connects incident diagnosis, proposed remediation, and execution while placing a human approval step before infrastructure changes. For on-call teams, the practical distinction is that automation does not automatically authorize write actions; the timeout example makes that approval boundary concrete.

Evidence

Start with the primary evidence, then review supporting sources and context.

1 items

Primary Evidence

1
  • OfficialAWS Artificial IntelligenceDocumentOriginal

    Automate remediation post AWS DevOps Agent investigation

    Michele Scarimbolo

    “AWS DevOps Agent can diagnose production incidents but is kept in observe-and-report mode so it does not change resources directly. This post shows how to use AWS Lambda Durable Functions, Amazon EventBridge, and Amazon Bedrock to turn its investigation summaries into pre-validated fixes an on-call engineer can approve with a single action.”

Recommended signals

Recommended by brand, topic, and recent related coverage

No more recommended signals right now

Official statement

Open original source