AWS DevOps Agent — Capabilities, Setup, and What It Actually Does

AWS DevOps Agent is an AI-powered incident investigation tool built on Amazon Bedrock AgentCore, generally available since March 2026. It connects to your observability stack, code repos, deployment pipelines, and runbooks to autonomously investigate incidents when alarms fire. Setup involves creating Agent Spaces, configuring IAM roles with specific trust policies, and building a bridge Lambda to route CloudWatch alarms via webhook. Real-world tests showed it can accurately identify root causes like missing IAM permissions and trace them to specific Terraform deployments with CloudTrail timestamps. However, it can misattribute blame — correctly identifying all components in an incident but recommending the wrong fix. Pricing is $0.0083/agent-second (~$30/hour) with a 2-month free trial. It works best for AWS-heavy teams with good observability coverage, but is not a replacement for engineers who understand the system.