AWS DevOps Agent Tools
Open-source skills, custom agents, MCP servers and infrastructure templates for AWS DevOps Agent that extend its capabilities for incident response, root cause analysis, and operational troubleshooting.
⚠️ Important Notice
These tools are provided as sample code. If you intend to deploy them in production, start with a non-production environment first, and before deploying to production:
- Test thoroughly in a non-production environment first
- Review IAM permissions and security configurations against your organization's policies
- Validate that behavior meets your operational requirements
See the LICENSE file for terms of use.
This repository contains:
- Skills — Domain-specific knowledge, decision trees, and step-by-step runbooks that the agent follows during investigations. Use them as-is or as templates for writing your own. Browse the Skills Catalog.
- Custom Agents — Pre-built agent configurations with system prompts and tool assignments for recurring operational workflows like health reports and operational reviews. Browse the Custom Agents Catalog.
- MCP Servers — MCP servers tailored to work with skills and custom agents in this repo, extending their capabilities to retrieve necessary information. Browse the MCP Servers Catalog.
- CloudFormation Templates — Infrastructure-as-code for provisioning IAM permissions that skills require and for forwarding CloudWatch alarms to DevOps Agent investigations.
All tools are contributed and tested according to the contribution guidelines.
What Are Skills, Custom Agents, and MCP Servers?
Skills are structured instruction sets that teach the agent how to investigate specific operational scenarios. They follow the open Agent Skills specification and can be uploaded to your Agent Space to extend the agent's knowledge beyond built-in capabilities. See the DevOps Agent skills documentation for more information.
Custom agents are user-defined AI agents that automate operational tasks specific to your infrastructure. You define a system prompt, assign tools and skills, and run them on demand or on a schedule. See the DevOps Agent custom agents documentation for more information.
MCP servers implement the open Model Context Protocol to connect the agent to external systems and data sources. The servers in this repository are tailored to work alongside the skills and custom agents here, extending their capabilities to retrieve the information they need.
Getting Started
See the Getting Started guide on the documentation site for step-by-step instructions on deploying skills and custom agents to your Agent Space.
Skill Permissions
Each skill documents the IAM permissions it requires in its README under Prerequisites. The DevOps Agent role associated with your Agent Space must have these permissions for the skill to function fully.
Most permissions are already covered by the AWS managed policy AIDevOpsAgentAccessPolicy. For skills that need additional permissions, you can use the included CloudFormation template to automatically provision them:
aws cloudformation deploy \
--template-file cloudformation/devops-agent-skill-policies/devops-agent-skill-policies.yaml \
--stack-name devops-agent-skill-policies \
--parameter-overrides ExistingRoleName=<YOUR-DEVOPS-AGENT-ROLE-NAME> \
--capabilities CAPABILITY_NAMED_IAM
The template supports enabling/disabling policies per skill, optional region restrictions, and can either attach to an existing role or create a new one. See cloudformation/devops-agent-skill-policies/devops-agent-skill-policies.yaml for details.
Contributing
We welcome contributions of new skills and improvements to existing ones. See CONTRIBUTING for guidelines.
Support
Need help, found a bug, or want to suggest a new tool? See SUPPORT for how to get support and where to file issues.
References
AWS Documentation
Blog Posts and Articles
Specifications and Tools
License
This library is licensed under the Apache-2.0 License. See the LICENSE file.
