[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Step 3: Create the Role in the Secondary Account in AWS DevOps Agent.

[Assistant]
In the secondary AWS account, create an IAM role with a trust policy that allows the DevOps Agent service role in your primary account to assume it.

Trust policy:

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::<primary-account-id>:role/AIDevOpsAgentServiceRole"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "<external-id-from-console>"
        }
      }
    }
  ]
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Step 4: Attach AIDevOpsAgentAccessPolicy in AWS DevOps Agent?

[Assistant]
Attach the AWS managed policy `AIDevOpsAgentAccessPolicy` to the role. This policy grants read-only access to the AWS services that DevOps Agent needs to investigate issues:

- CloudWatch Logs and Metrics
- AWS CloudTrail
- Amazon ECS and EKS
- AWS Lambda
- Amazon EC2
- AWS Systems Manager
- Amazon S3 (for log access)


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Step 4: Attach AIDevOpsAgentAccessPolicy in AWS DevOps Agent.

[Assistant]
Attach the AWS managed policy `AIDevOpsAgentAccessPolicy` to the role. This policy grants read-only access to the AWS services that DevOps Agent needs to investigate issues:

- CloudWatch Logs and Metrics
- AWS CloudTrail
- Amazon ECS and EKS
- AWS Lambda
- Amazon EC2
- AWS Systems Manager
- Amazon S3 (for log access)


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Step 5: Create an Inline Policy in AWS DevOps Agent?

[Assistant]
Create an inline policy for any additional permissions specific to your environment. For example, if you use custom KMS keys for encryption:

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:DescribeKey"
      ],
      "Resource": "arn:aws:kms:<region>:<secondary-account-id>:key/<key-id>"
    }
  ]
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Step 5: Create an Inline Policy in AWS DevOps Agent.

[Assistant]
Create an inline policy for any additional permissions specific to your environment. For example, if you use custom KMS keys for encryption:

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:DescribeKey"
      ],
      "Resource": "arn:aws:kms:<region>:<secondary-account-id>:key/<key-id>"
    }
  ]
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Step 6: Complete Configuration in AWS DevOps Agent?

[Assistant] Return to the DevOps Agent console and complete the account connection setup. DevOps Agent will verify it can assume the role in the secondary account.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Step 6: Complete Configuration in AWS DevOps Agent.

[Assistant] Return to the DevOps Agent console and complete the account connection setup. DevOps Agent will verify it can assume the role in the secondary account.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Trust Policy in AWS DevOps Agent?

[Assistant]
The trust policy defines who can assume the role. It must specify:
- The principal (DevOps Agent service role ARN from the primary account)
- An external ID condition for security
- The `sts:AssumeRole` action


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Trust Policy in AWS DevOps Agent.

[Assistant]
The trust policy defines who can assume the role. It must specify:
- The principal (DevOps Agent service role ARN from the primary account)
- An external ID condition for security
- The `sts:AssumeRole` action


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Managed Policy (AIDevOpsAgentAccessPolicy) in AWS DevOps Agent?

[Assistant] This AWS-managed policy provides baseline read-only permissions across services commonly used during incident investigation. AWS maintains and updates this policy as DevOps Agent capabilities expand.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Managed Policy (AIDevOpsAgentAccessPolicy) in AWS DevOps Agent.

[Assistant] This AWS-managed policy provides baseline read-only permissions across services commonly used during incident investigation. AWS maintains and updates this policy as DevOps Agent capabilities expand.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Inline Policy in AWS DevOps Agent?

[Assistant]
The inline policy provides account-specific permissions that go beyond the managed policy, such as:
- Access to customer-managed KMS keys
- Access to specific S3 buckets with custom resource policies
- Permissions for custom or third-party AWS services


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Inline Policy in AWS DevOps Agent.

[Assistant]
The inline policy provides account-specific permissions that go beyond the managed policy, such as:
- Access to customer-managed KMS keys
- Access to specific S3 buckets with custom resource policies
- Permissions for custom or third-party AWS services


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Best Practices in AWS DevOps Agent?

[Assistant]
- Use the external ID condition in the trust policy to prevent confused deputy attacks.
- Regularly audit cross-account role usage via CloudTrail.
- Apply the principle of least privilege when creating inline policies.
- Tag cross-account roles for easy identification and management.
- Test the connection after setup to verify DevOps Agent can access resources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Best Practices in AWS DevOps Agent.

[Assistant]
- Use the external ID condition in the trust policy to prevent confused deputy attacks.
- Regularly audit cross-account role usage via CloudTrail.
- Apply the principle of least privilege when creating inline policies.
- Tag cross-account roles for easy identification and management.
- Test the connection after setup to verify DevOps Agent can access resources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Give me a comprehensive overview of connecting remote a2a agents in AWS DevOps Agent.

[Assistant]
# Connecting Remote A2A Agents

You can extend the capabilities of AWS DevOps Agent by connecting remote agents that support the Agent-to-Agent (A2A) protocol. Remote A2A agents allow DevOps Agent to delegate specialized tasks to external agent systems.

## Requirements

To connect a remote A2A agent, it must meet the following requirements:

- **A2A Protocol Support**: The remote agent must implement the A2A protocol specification, exposing a valid agent card at a discoverable endpoint.
- **Authentication**: The remote agent must support one of the authentication methods recognized by DevOps Agent.
- **Network Accessibility**: The agent endpoint must be reachable from AWS DevOps Agent (either publicly or via a private connection).

## Security Considerations

When connecting remote A2A agents, consider the following:

- Remote agents receive context from DevOps Agent investigations, which may include sensitive operational data.
- Ensure the remote agent endpoint uses TLS encryption.
- Use the least-privilege authentication method appropriate for your use case.
- Regularly rotate credentials used for agent authentication.
- Monitor agent invocations through CloudWatch logs and metrics.

## Registration

### Agent Card Endpoint

The remote agent must expose an agent card at a well-known endpoint. The agent card describes the agent's capabilities, supported tasks, and authentication requirements.

```
https://your-agent-host/.well-known/agent.json
```

The agent card must include:

- Agent name and description
- Supported task types
- Input/output schemas
- Authentication requirements

### Authentication Methods

DevOps Agent supports the following authentication methods when connecting to remote A2A agents:

| Method | Description | Use Case |
|--------|-------------|----------|
| API Key | Static API key passed in a header | Simple integrations, development |
| Bearer Token | OAuth 2.0 bearer token | Token-based auth systems |
| OAuth 2.0 | Full OAuth 2.0 client credentials flow | Enterprise identity providers |
| SigV4 | AWS Signature Version 4 | AWS-hosted agents, IAM-based auth |

#### API Key Authentication

```json
{
  "auth_type": "api_key",
  "api_key_header": "X-API-Key",
  "api_key_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-key"
}
```

#### Bearer Token Authentication

```json
{
  "auth_type": "bearer_token",
  "token_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-token"
}
```

#### OAuth 2.0 Authentication

```json
{
  "auth_type": "oauth2",
  "token_endpoint": "https://auth.example.com/oauth/token",
  "client_id": "your-client-id",
  "client_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:oauth-secret",
  "scopes": ["agent:invoke"]
}
```

#### SigV4 Authentication

```json
{
  "auth_type": "sigv4",
  "service_name": "execute-api",
  "region": "us-east-1"
}
```

## Associating with Agent Spaces

After registering a remote A2A agent, you must associate it with one or more Agent Spaces for it to be available during investigations.

1. Navigate to the Agent Space configuration.
2. Under **Connected Agents**, select **Add remote agent**.
3. Choose the registered A2A agent from the list.
4. Configure invocation permissions and any task-specific settings.
5. Save the Agent Space configuration.

The remote agent will now be available to DevOps Agent when working within that Agent Space. DevOps Agent will automatically determine when to delegate tasks to the remote agent based on the agent card's declared capabilities and the current investigation context.

## Managing Remote Agents

- **List registered agents**: View all registered remote A2A agents in the DevOps Agent console under Settings > Remote Agents.
- **Update credentials**: Rotate authentication credentials by updating the referenced Secrets Manager secret.
- **Remove an agent**: Disassociate from all Agent Spaces first, then delete the registration.
- **Monitor usage**: Check CloudWatch metrics for invocation counts, latency, and error rates per remote agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is connecting remote a2a agents?

[Assistant]
# Connecting Remote A2A Agents

You can extend the capabilities of AWS DevOps Agent by connecting remote agents that support the Agent-to-Agent (A2A) protocol. Remote A2A agents allow DevOps Agent to delegate specialized tasks to external agent systems.

## Requirements

To connect a remote A2A agent, it must meet the following requirements:

- **A2A Protocol Support**: The remote agent must implement the A2A protocol specification, exposing a valid agent card at a discoverable endpoint.
- **Authentication**: The remote agent must support one of the authentication methods recognized by DevOps Agent.
- **Network Accessibility**: The agent endpoint must be reachable from AWS DevOps Agent (either publicly or via a private connection).

## Security Considerations

When connecting remote A2A agents, consider the following:

- Remote agents receive context from DevOps Agent investigations, which may include sensitive operational data.
- Ensure the remote agent endpoint uses TLS encryption.
- Use the least-privilege authentication method appropriate for your use case.
- Regularly rotate credentials used for agent authentication.
- Monitor agent invocations through CloudWatch logs and metrics.

## Registration

### Agent Card Endpoint

The remote agent must expose an agent card at a well-known endpoint. The agent card describes the agent's capabilities, supported tasks, and authentication requirements.

```
https://your-agent-host/.well-known/agent.json
```

The agent card must include:

- Agent name and description
- Supported task types
- Input/output schemas
- Authentication requirements

### Authentication Methods

DevOps Agent supports the following authentication methods when connecting to remote A2A agents:

| Method | Description | Use Case |
|--------|-------------|----------|
| API Key | Static API key passed in a header | Simple integrations, development |
| Bearer Token | OAuth 2.0 bearer token | Token-based auth systems |
| OAuth 2.0 | Full OAuth 2.0 client credentials flow | Enterprise identity providers |
| SigV4 | AWS Signature Version 4 | AWS-hosted agents, IAM-based auth |

#### API Key Authentication

```json
{
  "auth_type": "api_key",
  "api_key_header": "X-API-Key",
  "api_key_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-key"
}
```

#### Bearer Token Authentication

```json
{
  "auth_type": "bearer_token",
  "token_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-token"
}
```

#### OAuth 2.0 Authentication

```json
{
  "auth_type": "oauth2",
  "token_endpoint": "https://auth.example.com/oauth/token",
  "client_id": "your-client-id",
  "client_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:oauth-secret",
  "scopes": ["agent:invoke"]
}
```

#### SigV4 Authentication

```json
{
  "auth_type": "sigv4",
  "service_name": "execute-api",
  "region": "us-east-1"
}
```

## Associating with Agent Spaces

After registering a remote A2A agent, you must associate it with one or more Agent Spaces for it to be available during investigations.

1. Navigate to the Agent Space configuration.
2. Under **Connected Agents**, select **Add remote agent**.
3. Choose the registered A2A agent from the list.
4. Configure invocation permissions and any task-specific settings.
5. Save the Agent Space configuration.

The remote agent will now be available to DevOps Agent when working within that Agent Space. DevOps Agent will automatically determine when to delegate tasks to the remote agent based on the agent card's declared capabilities and the current investigation context.

## Managing Remote Agents

- **List registered agents**: View all registered remote A2A agents in the DevOps Agent console under Settings > Remote Agents.
- **Update credentials**: Rotate authentication credentials by updating the referenced Secrets Manager secret.
- **Remove an agent**: Disassociate from all Agent Spaces first, then delete the registration.
- **Monitor usage**: Check CloudWatch metrics for invocation counts, latency, and error rates per remote agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting remote a2a agents to AWS DevOps Agent?

[Assistant] You can extend the capabilities of AWS DevOps Agent by connecting remote agents that support the Agent-to-Agent (A2A) protocol. Remote A2A agents allow DevOps Agent to delegate specialized tasks to external agent systems.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting remote a2a agents with AWS DevOps Agent?

[Assistant] You can extend the capabilities of AWS DevOps Agent by connecting remote agents that support the Agent-to-Agent (A2A) protocol. Remote A2A agents allow DevOps Agent to delegate specialized tasks to external agent systems.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Requirements in AWS DevOps Agent?

[Assistant]
To connect a remote A2A agent, it must meet the following requirements:

- **A2A Protocol Support**: The remote agent must implement the A2A protocol specification, exposing a valid agent card at a discoverable endpoint.
- **Authentication**: The remote agent must support one of the authentication methods recognized by DevOps Agent.
- **Network Accessibility**: The agent endpoint must be reachable from AWS DevOps Agent (either publicly or via a private connection).


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Requirements in AWS DevOps Agent.

[Assistant]
To connect a remote A2A agent, it must meet the following requirements:

- **A2A Protocol Support**: The remote agent must implement the A2A protocol specification, exposing a valid agent card at a discoverable endpoint.
- **Authentication**: The remote agent must support one of the authentication methods recognized by DevOps Agent.
- **Network Accessibility**: The agent endpoint must be reachable from AWS DevOps Agent (either publicly or via a private connection).


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
When connecting remote A2A agents, consider the following:

- Remote agents receive context from DevOps Agent investigations, which may include sensitive operational data.
- Ensure the remote agent endpoint uses TLS encryption.
- Use the least-privilege authentication method appropriate for your use case.
- Regularly rotate credentials used for agent authentication.
- Monitor agent invocations through CloudWatch logs and metrics.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
When connecting remote A2A agents, consider the following:

- Remote agents receive context from DevOps Agent investigations, which may include sensitive operational data.
- Ensure the remote agent endpoint uses TLS encryption.
- Use the least-privilege authentication method appropriate for your use case.
- Regularly rotate credentials used for agent authentication.
- Monitor agent invocations through CloudWatch logs and metrics.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Agent Card Endpoint in AWS DevOps Agent?

[Assistant]
The remote agent must expose an agent card at a well-known endpoint. The agent card describes the agent's capabilities, supported tasks, and authentication requirements.

```
https://your-agent-host/.well-known/agent.json
```

The agent card must include:

- Agent name and description
- Supported task types
- Input/output schemas
- Authentication requirements


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Agent Card Endpoint in AWS DevOps Agent.

[Assistant]
The remote agent must expose an agent card at a well-known endpoint. The agent card describes the agent's capabilities, supported tasks, and authentication requirements.

```
https://your-agent-host/.well-known/agent.json
```

The agent card must include:

- Agent name and description
- Supported task types
- Input/output schemas
- Authentication requirements


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
DevOps Agent supports the following authentication methods when connecting to remote A2A agents:

| Method | Description | Use Case |
|--------|-------------|----------|
| API Key | Static API key passed in a header | Simple integrations, development |
| Bearer Token | OAuth 2.0 bearer token | Token-based auth systems |
| OAuth 2.0 | Full OAuth 2.0 client credentials flow | Enterprise identity providers |
| SigV4 | AWS Signature Version 4 | AWS-hosted agents, IAM-based auth |


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
DevOps Agent supports the following authentication methods when connecting to remote A2A agents:

| Method | Description | Use Case |
|--------|-------------|----------|
| API Key | Static API key passed in a header | Simple integrations, development |
| Bearer Token | OAuth 2.0 bearer token | Token-based auth systems |
| OAuth 2.0 | Full OAuth 2.0 client credentials flow | Enterprise identity providers |
| SigV4 | AWS Signature Version 4 | AWS-hosted agents, IAM-based auth |


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
```json
{
  "auth_type": "api_key",
  "api_key_header": "X-API-Key",
  "api_key_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-key"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
```json
{
  "auth_type": "api_key",
  "api_key_header": "X-API-Key",
  "api_key_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-key"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
```json
{
  "auth_type": "bearer_token",
  "token_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-token"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
```json
{
  "auth_type": "bearer_token",
  "token_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-agent-token"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
```json
{
  "auth_type": "oauth2",
  "token_endpoint": "https://auth.example.com/oauth/token",
  "client_id": "your-client-id",
  "client_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:oauth-secret",
  "scopes": ["agent:invoke"]
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
```json
{
  "auth_type": "oauth2",
  "token_endpoint": "https://auth.example.com/oauth/token",
  "client_id": "your-client-id",
  "client_secret_arn": "arn:aws:secretsmanager:us-east-1:123456789012:secret:oauth-secret",
  "scopes": ["agent:invoke"]
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How does connecting remote a2a agents work in AWS DevOps Agent?

[Assistant]
```json
{
  "auth_type": "sigv4",
  "service_name": "execute-api",
  "region": "us-east-1"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What security features does AWS DevOps Agent provide for connecting remote a2a agents?

[Assistant]
```json
{
  "auth_type": "sigv4",
  "service_name": "execute-api",
  "region": "us-east-1"
}
```


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Associating with Agent Spaces in AWS DevOps Agent?

[Assistant]
After registering a remote A2A agent, you must associate it with one or more Agent Spaces for it to be available during investigations.

1. Navigate to the Agent Space configuration.
2. Under **Connected Agents**, select **Add remote agent**.
3. Choose the registered A2A agent from the list.
4. Configure invocation permissions and any task-specific settings.
5. Save the Agent Space configuration.

The remote agent will now be available to DevOps Agent when working within that Agent Space. DevOps Agent will automatically determine when to delegate tasks to the remote agent based on the agent card's declared capabilities and the current investigation context.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Associating with Agent Spaces in AWS DevOps Agent.

[Assistant]
After registering a remote A2A agent, you must associate it with one or more Agent Spaces for it to be available during investigations.

1. Navigate to the Agent Space configuration.
2. Under **Connected Agents**, select **Add remote agent**.
3. Choose the registered A2A agent from the list.
4. Configure invocation permissions and any task-specific settings.
5. Save the Agent Space configuration.

The remote agent will now be available to DevOps Agent when working within that Agent Space. DevOps Agent will automatically determine when to delegate tasks to the remote agent based on the agent card's declared capabilities and the current investigation context.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Managing Remote Agents in AWS DevOps Agent?

[Assistant]
- **List registered agents**: View all registered remote A2A agents in the DevOps Agent console under Settings > Remote Agents.
- **Update credentials**: Rotate authentication credentials by updating the referenced Secrets Manager secret.
- **Remove an agent**: Disassociate from all Agent Spaces first, then delete the registration.
- **Monitor usage**: Check CloudWatch metrics for invocation counts, latency, and error rates per remote agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Managing Remote Agents in AWS DevOps Agent.

[Assistant]
- **List registered agents**: View all registered remote A2A agents in the DevOps Agent console under Settings > Remote Agents.
- **Update credentials**: Rotate authentication credentials by updating the referenced Secrets Manager secret.
- **Remove an agent**: Disassociate from all Agent Spaces first, then delete the registration.
- **Monitor usage**: Check CloudWatch metrics for invocation counts, latency, and error rates per remote agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Give me a comprehensive overview of connecting telemetry sources index in AWS DevOps Agent.

[Assistant]
# Connecting Telemetry Sources

AWS DevOps Agent can ingest telemetry data from multiple observability platforms to enrich its investigations. There are three ways to connect telemetry sources.

## Integration Types

### Built-in 2-Way Integrations

Two-way integrations allow DevOps Agent to both receive alerts from and query data in the telemetry platform.

| Platform | Capabilities |
|----------|-------------|
| Dynatrace | Receive incidents, query metrics/traces/logs, create mitigations |

With 2-way integrations, DevOps Agent can proactively pull additional context during investigations, such as related metrics, traces, and topology information.

### Built-in 1-Way Integrations

One-way integrations allow DevOps Agent to receive alerts and query data from the telemetry platform via MCP (Model Context Protocol) endpoints.

| Platform | Protocol | Capabilities |
|----------|----------|-------------|
| Amazon CloudWatch | Native AWS | Metrics, logs, alarms |
| Amazon S3 | Native AWS | Log files, data objects |
| Datadog | MCP over OAuth | Metrics, monitors, events |
| Grafana | MCP over Service Account | Dashboards, alerts, datasources |
| New Relic | MCP over API Key | APM, infrastructure, alerts |
| Splunk | MCP over Bearer Token | Search, alerts, dashboards |

One-way integrations receive webhook notifications for alerts and can query the platform for additional data during investigations.

### Bring-Your-Own via Webhook/MCP

For observability platforms not covered by built-in integrations, you can connect custom sources using:

- **Generic Webhooks**: Send alert data to DevOps Agent using the generic webhook endpoint with a standardized payload format.
- **Custom MCP Servers**: Connect any MCP-compatible server to provide DevOps Agent with access to custom data sources.

## Choosing an Integration Type

| Consideration | 2-Way | 1-Way | Bring-Your-Own |
|---------------|-------|-------|----------------|
| Setup complexity | Medium | Low | Variable |
| Data richness | Highest | High | Depends on implementation |
| Bidirectional actions | Yes | No | No |
| Maintenance | Managed by AWS | Managed by AWS | Customer-managed |

## Getting Started

1. Identify which telemetry platforms your team uses.
2. Check if a built-in integration exists for your platform.
3. Follow the platform-specific setup guide to register the integration.
4. Associate the telemetry source with an Agent Space.
5. Configure webhooks in your telemetry platform to send alerts to DevOps Agent.

## Common Configuration Steps

Regardless of the integration type, most telemetry connections follow this pattern:

1. **Register** the telemetry source with DevOps Agent (provide credentials and endpoint information).
2. **Enable** the source in one or more Agent Spaces.
3. **Configure** the external platform to send webhooks to DevOps Agent.
4. **Verify** the connection by triggering a test alert.

See the individual platform guides for detailed instructions.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is connecting telemetry sources index?

[Assistant]
# Connecting Telemetry Sources

AWS DevOps Agent can ingest telemetry data from multiple observability platforms to enrich its investigations. There are three ways to connect telemetry sources.

## Integration Types

### Built-in 2-Way Integrations

Two-way integrations allow DevOps Agent to both receive alerts from and query data in the telemetry platform.

| Platform | Capabilities |
|----------|-------------|
| Dynatrace | Receive incidents, query metrics/traces/logs, create mitigations |

With 2-way integrations, DevOps Agent can proactively pull additional context during investigations, such as related metrics, traces, and topology information.

### Built-in 1-Way Integrations

One-way integrations allow DevOps Agent to receive alerts and query data from the telemetry platform via MCP (Model Context Protocol) endpoints.

| Platform | Protocol | Capabilities |
|----------|----------|-------------|
| Amazon CloudWatch | Native AWS | Metrics, logs, alarms |
| Amazon S3 | Native AWS | Log files, data objects |
| Datadog | MCP over OAuth | Metrics, monitors, events |
| Grafana | MCP over Service Account | Dashboards, alerts, datasources |
| New Relic | MCP over API Key | APM, infrastructure, alerts |
| Splunk | MCP over Bearer Token | Search, alerts, dashboards |

One-way integrations receive webhook notifications for alerts and can query the platform for additional data during investigations.

### Bring-Your-Own via Webhook/MCP

For observability platforms not covered by built-in integrations, you can connect custom sources using:

- **Generic Webhooks**: Send alert data to DevOps Agent using the generic webhook endpoint with a standardized payload format.
- **Custom MCP Servers**: Connect any MCP-compatible server to provide DevOps Agent with access to custom data sources.

## Choosing an Integration Type

| Consideration | 2-Way | 1-Way | Bring-Your-Own |
|---------------|-------|-------|----------------|
| Setup complexity | Medium | Low | Variable |
| Data richness | Highest | High | Depends on implementation |
| Bidirectional actions | Yes | No | No |
| Maintenance | Managed by AWS | Managed by AWS | Customer-managed |

## Getting Started

1. Identify which telemetry platforms your team uses.
2. Check if a built-in integration exists for your platform.
3. Follow the platform-specific setup guide to register the integration.
4. Associate the telemetry source with an Agent Space.
5. Configure webhooks in your telemetry platform to send alerts to DevOps Agent.

## Common Configuration Steps

Regardless of the integration type, most telemetry connections follow this pattern:

1. **Register** the telemetry source with DevOps Agent (provide credentials and endpoint information).
2. **Enable** the source in one or more Agent Spaces.
3. **Configure** the external platform to send webhooks to DevOps Agent.
4. **Verify** the connection by triggering a test alert.

See the individual platform guides for detailed instructions.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting telemetry sources index to AWS DevOps Agent?

[Assistant] AWS DevOps Agent can ingest telemetry data from multiple observability platforms to enrich its investigations. There are three ways to connect telemetry sources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting telemetry sources index with AWS DevOps Agent?

[Assistant] AWS DevOps Agent can ingest telemetry data from multiple observability platforms to enrich its investigations. There are three ways to connect telemetry sources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting telemetry sources index to AWS DevOps Agent?

[Assistant]
Two-way integrations allow DevOps Agent to both receive alerts from and query data in the telemetry platform.

| Platform | Capabilities |
|----------|-------------|
| Dynatrace | Receive incidents, query metrics/traces/logs, create mitigations |

With 2-way integrations, DevOps Agent can proactively pull additional context during investigations, such as related metrics, traces, and topology information.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting telemetry sources index with AWS DevOps Agent?

[Assistant]
Two-way integrations allow DevOps Agent to both receive alerts from and query data in the telemetry platform.

| Platform | Capabilities |
|----------|-------------|
| Dynatrace | Receive incidents, query metrics/traces/logs, create mitigations |

With 2-way integrations, DevOps Agent can proactively pull additional context during investigations, such as related metrics, traces, and topology information.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting telemetry sources index to AWS DevOps Agent?

[Assistant]
One-way integrations allow DevOps Agent to receive alerts and query data from the telemetry platform via MCP (Model Context Protocol) endpoints.

| Platform | Protocol | Capabilities |
|----------|----------|-------------|
| Amazon CloudWatch | Native AWS | Metrics, logs, alarms |
| Amazon S3 | Native AWS | Log files, data objects |
| Datadog | MCP over OAuth | Metrics, monitors, events |
| Grafana | MCP over Service Account | Dashboards, alerts, datasources |
| New Relic | MCP over API Key | APM, infrastructure, alerts |
| Splunk | MCP over Bearer Token | Search, alerts, dashboards |

One-way integrations receive webhook notifications for alerts and can query the platform for additional data during investigations.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting telemetry sources index with AWS DevOps Agent?

[Assistant]
One-way integrations allow DevOps Agent to receive alerts and query data from the telemetry platform via MCP (Model Context Protocol) endpoints.

| Platform | Protocol | Capabilities |
|----------|----------|-------------|
| Amazon CloudWatch | Native AWS | Metrics, logs, alarms |
| Amazon S3 | Native AWS | Log files, data objects |
| Datadog | MCP over OAuth | Metrics, monitors, events |
| Grafana | MCP over Service Account | Dashboards, alerts, datasources |
| New Relic | MCP over API Key | APM, infrastructure, alerts |
| Splunk | MCP over Bearer Token | Search, alerts, dashboards |

One-way integrations receive webhook notifications for alerts and can query the platform for additional data during investigations.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Bring-Your-Own via Webhook/MCP in AWS DevOps Agent?

[Assistant]
For observability platforms not covered by built-in integrations, you can connect custom sources using:

- **Generic Webhooks**: Send alert data to DevOps Agent using the generic webhook endpoint with a standardized payload format.
- **Custom MCP Servers**: Connect any MCP-compatible server to provide DevOps Agent with access to custom data sources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Bring-Your-Own via Webhook/MCP in AWS DevOps Agent.

[Assistant]
For observability platforms not covered by built-in integrations, you can connect custom sources using:

- **Generic Webhooks**: Send alert data to DevOps Agent using the generic webhook endpoint with a standardized payload format.
- **Custom MCP Servers**: Connect any MCP-compatible server to provide DevOps Agent with access to custom data sources.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting telemetry sources index to AWS DevOps Agent?

[Assistant]
| Consideration | 2-Way | 1-Way | Bring-Your-Own |
|---------------|-------|-------|----------------|
| Setup complexity | Medium | Low | Variable |
| Data richness | Highest | High | Depends on implementation |
| Bidirectional actions | Yes | No | No |
| Maintenance | Managed by AWS | Managed by AWS | Customer-managed |


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting telemetry sources index with AWS DevOps Agent?

[Assistant]
| Consideration | 2-Way | 1-Way | Bring-Your-Own |
|---------------|-------|-------|----------------|
| Setup complexity | Medium | Low | Variable |
| Data richness | Highest | High | Depends on implementation |
| Bidirectional actions | Yes | No | No |
| Maintenance | Managed by AWS | Managed by AWS | Customer-managed |


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I set up connecting telemetry sources index in AWS DevOps Agent?

[Assistant]
1. Identify which telemetry platforms your team uses.
2. Check if a built-in integration exists for your platform.
3. Follow the platform-specific setup guide to register the integration.
4. Associate the telemetry source with an Agent Space.
5. Configure webhooks in your telemetry platform to send alerts to DevOps Agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Walk me through getting started for AWS DevOps Agent.

[Assistant]
1. Identify which telemetry platforms your team uses.
2. Check if a built-in integration exists for your platform.
3. Follow the platform-specific setup guide to register the integration.
4. Associate the telemetry source with an Agent Space.
5. Configure webhooks in your telemetry platform to send alerts to DevOps Agent.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Common Configuration Steps in AWS DevOps Agent?

[Assistant]
Regardless of the integration type, most telemetry connections follow this pattern:

1. **Register** the telemetry source with DevOps Agent (provide credentials and endpoint information).
2. **Enable** the source in one or more Agent Spaces.
3. **Configure** the external platform to send webhooks to DevOps Agent.
4. **Verify** the connection by triggering a test alert.

See the individual platform guides for detailed instructions.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Tell me about Common Configuration Steps in AWS DevOps Agent.

[Assistant]
Regardless of the integration type, most telemetry connections follow this pattern:

1. **Register** the telemetry source with DevOps Agent (provide credentials and endpoint information).
2. **Enable** the source in one or more Agent Spaces.
3. **Configure** the external platform to send webhooks to DevOps Agent.
4. **Verify** the connection by triggering a test alert.

See the individual platform guides for detailed instructions.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] Give me a comprehensive overview of connecting to cicd pipelines index in AWS DevOps Agent.

[Assistant]
# Connecting to CI/CD pipelines

CI/CD pipeline integration enables AWS DevOps Agent to monitor deployments and correlate code changes with operational incidents during investigations.

Two-step process:
1. Account-level registration – Register your CI/CD provider once
2. Agent Space connection – Connect specific projects or repositories

## Supported CI/CD providers
+ **GitHub** – Connect repositories from GitHub.com using the AWS DevOps Agent GitHub app.
+ **GitLab** – Connect projects from GitLab.com, managed GitLab instances, or publicly accessible self-hosted GitLab deployments.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is connecting to cicd pipelines index?

[Assistant]
# Connecting to CI/CD pipelines

CI/CD pipeline integration enables AWS DevOps Agent to monitor deployments and correlate code changes with operational incidents during investigations.

Two-step process:
1. Account-level registration – Register your CI/CD provider once
2. Agent Space connection – Connect specific projects or repositories

## Supported CI/CD providers
+ **GitHub** – Connect repositories from GitHub.com using the AWS DevOps Agent GitHub app.
+ **GitLab** – Connect projects from GitLab.com, managed GitLab instances, or publicly accessible self-hosted GitLab deployments.


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] How do I connect connecting to cicd pipelines index to AWS DevOps Agent?

[Assistant]
CI/CD pipeline integration enables AWS DevOps Agent to monitor deployments and correlate code changes with operational incidents during investigations.

Two-step process:
1. Account-level registration – Register your CI/CD provider once
2. Agent Space connection – Connect specific projects or repositories


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What's the process for integrating connecting to cicd pipelines index with AWS DevOps Agent?

[Assistant]
CI/CD pipeline integration enables AWS DevOps Agent to monitor deployments and correlate code changes with operational incidents during investigations.

Two-step process:
1. Account-level registration – Register your CI/CD provider once
2. Agent Space connection – Connect specific projects or repositories


[System]
/no_think
You are Tech Advisor, an expert on AWS cloud services with deep knowledge of AWS DevOps Agent.

You have comprehensive knowledge of AWS DevOps Agent including:
- What it is and how it works (Agent Spaces, topology, dual-console architecture)
- Key features: autonomous incident response, proactive prevention, on-demand SRE tasks
- Integrations: CloudWatch, Datadog, Dynatrace, New Relic, Splunk, Grafana, PagerDuty, GitHub, GitLab, Azure DevOps, ServiceNow, Slack
- GA features: Azure/on-prem support, Triage Agent, Learned/Custom Skills, Code Indexing, Private Connections
- Pricing: $0.0083 per agent-second, free trial details, AWS Support credits
- Getting started: Agent Spaces, connecting tools, running investigations
- Security: encryption, customer managed keys, IdP integration, CloudTrail auditing
- Available regions: US East, US West, Frankfurt, Ireland, Sydney, Tokyo

Be concise and structured. Use bullet points where appropriate. Provide accurate, detailed answers.

[User] What is Supported CI/CD providers in AWS DevOps Agent?

[Assistant]
+ **GitHub** – Connect repositories from GitHub.com using the AWS DevOps Agent GitHub app.
+ **GitLab** – Connect projects from GitLab.com, managed GitLab instances, or publicly accessible self-hosted GitLab deployments.