Automate remediation post AWS DevOps Agent investigation

This article demonstrates how to automate incident remediation using AWS Lambda Durable Functions, Amazon EventBridge, and Amazon Bedrock to complement AWS DevOps Agent investigations with pre-validated fixes requiring single approval.

• AWS DevOps Agent completes incident investigation and emits events with root cause analysis and findings
• Amazon EventBridge triggers Lambda functions that invoke Amazon Bedrock for remediation analysis
• Bedrock identifies applicable remediations from a curated allowlist of approved Lambda tools
• Read-only actions execute autonomously; infrastructure changes require human approval before execution
• Lambda Durable Functions checkpoint progress and suspend without consuming resources during approval waits
• Solution reduces mean time to resolution by pre-validating fixes before engineer engagement
• Allowlist enforcement restricts Bedrock to only invoke pre-approved remediation tools for safety

The workflow transforms investigation summaries into actionable remediation steps with human-in-the-loop approval, reducing MTTR while maintaining safety through tool allowlists and approval gates.