# aws/tools-for-devops-agent architecture

> Architecture diagram of the GitHub repository aws/tools-for-devops-agent, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-27). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/aws/tools-for-devops-agent
- Repository: https://github.com/aws/tools-for-devops-agent

## Overview

This repository is a toolkit for extending AWS DevOps Agent with operational knowledge, configured agents, data-retrieval tools, and IAM templates. The documented user workflow is to deploy skills and agents to an Agent Space, then use them during incident investigation; MCP servers provide access to supporting operational data. The graph represents the repository’s major product branches and selected MCP servers visible in the tree. Source excerpts are partial, so internal wiring beyond the sampled DNS, database, EKS, and ECS implementations is not inferred.

Main entry points: [`mcp`](https://github.com/aws/tools-for-devops-agent/tree/main/mcp) (MCP servers), [`skills`](https://github.com/aws/tools-for-devops-agent/tree/main/skills) (Skills catalog), [`custom-agents`](https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents) (Custom agents), [`mcp/ecs-instance-log-mcp`](https://github.com/aws/tools-for-devops-agent/tree/main/mcp/ecs-instance-log-mcp) (ECS log analysis)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_knowledge["Investigation knowledge"]
  node_skills["Skills catalog"]
  node_health_skill["Health events"]
  node_dns_skill["DNS investigation"]
  node_support_skill["Support cases"]
end

subgraph group_agents["Agent workflows"]
  node_custom_agents["Custom agents"]
  node_health_agent["Health report"]
  node_review_agent["Operation review"]
end

subgraph group_mcp["Operational MCP tools"]
  node_mcp_catalog["MCP servers"]
  node_eks_mcp["EKS diagnostics"]
  node_ecs_mcp["ECS log analysis"]
  node_dns_mcp["VPC DNS diagnostics"]
  node_rds_mcp["Aurora diagnostics"]
  node_dns_model["DNS simulation model<br/>[dns_model.py]"]
  node_ecs_handler["ECS analysis handler"]
end

subgraph group_access["Permissions"]
  node_iam_template["Skill IAM policies"]
end

node_operator(("Operator"))
node_devops(("AWS DevOps Agent"))
node_aws_services["AWS operational services"]
node_aws_iam["AWS IAM"]

node_operator -->|"starts investigation"| node_devops
node_devops -->|"uses knowledge"| node_skills
node_devops -->|"runs workflows"| node_custom_agents
node_devops -->|"retrieves data"| node_mcp_catalog
node_skills -->|"includes"| node_health_skill
node_skills -->|"includes"| node_dns_skill
node_skills -->|"includes"| node_support_skill
node_custom_agents -->|"includes"| node_health_agent
node_custom_agents -->|"includes"| node_review_agent
node_mcp_catalog -->|"includes"| node_eks_mcp
node_mcp_catalog -->|"includes"| node_ecs_mcp
node_mcp_catalog -->|"includes"| node_dns_mcp
node_mcp_catalog -->|"includes"| node_rds_mcp
node_dns_mcp -->|"uses model"| node_dns_model
node_ecs_mcp -->|"handles requests"| node_ecs_handler
node_eks_mcp -->|"collects diagnostics"| node_aws_services
node_ecs_mcp -->|"retrieves logs"| node_aws_services
node_dns_mcp -->|"reads DNS config"| node_aws_services
node_rds_mcp -->|"reads database health"| node_aws_services
node_iam_template -->|"provisions permissions"| node_aws_iam

click node_skills "https://github.com/aws/tools-for-devops-agent/tree/main/skills"
click node_health_skill "https://github.com/aws/tools-for-devops-agent/tree/main/skills/aws-health-events"
click node_dns_skill "https://github.com/aws/tools-for-devops-agent/tree/main/skills/aws-vpc-dns-investigation"
click node_support_skill "https://github.com/aws/tools-for-devops-agent/tree/main/skills/support-cases"
click node_custom_agents "https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents"
click node_health_agent "https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents/aws-health-report"
click node_review_agent "https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents/aws-operation-review"
click node_mcp_catalog "https://github.com/aws/tools-for-devops-agent/tree/main/mcp"
click node_eks_mcp "https://github.com/aws/tools-for-devops-agent/tree/main/mcp/aws-eks-node-diagnostics-mcp"
click node_ecs_mcp "https://github.com/aws/tools-for-devops-agent/tree/main/mcp/ecs-instance-log-mcp"
click node_dns_mcp "https://github.com/aws/tools-for-devops-agent/tree/main/mcp/aws-vpc-dns-diagnostics-mcp"
click node_rds_mcp "https://github.com/aws/tools-for-devops-agent/tree/main/mcp/rds-aidba"
click node_dns_model "https://github.com/aws/tools-for-devops-agent/blob/main/mcp/aws-vpc-dns-diagnostics-mcp/src/dns_model.py"
click node_ecs_handler "https://github.com/aws/tools-for-devops-agent/blob/main/mcp/ecs-instance-log-mcp/src/lambda/ecs-log-automation.py"
click node_iam_template "https://github.com/aws/tools-for-devops-agent/blob/main/cloudformation/devops-agent-skill-policies.yaml"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_skills,node_health_skill,node_dns_skill,node_support_skill toneBlue
class node_custom_agents,node_health_agent,node_review_agent toneAmber
class node_mcp_catalog,node_eks_mcp,node_ecs_mcp,node_dns_mcp,node_rds_mcp,node_dns_model,node_ecs_handler toneMint
class node_iam_template toneRose
class node_operator,node_devops,node_aws_services,node_aws_iam toneIndigo
```

## Components

### Investigation knowledge

- [Skills catalog](https://github.com/aws/tools-for-devops-agent/tree/main/skills): `skills`
- [Health events](https://github.com/aws/tools-for-devops-agent/tree/main/skills/aws-health-events): `skills/aws-health-events`
- [DNS investigation](https://github.com/aws/tools-for-devops-agent/tree/main/skills/aws-vpc-dns-investigation): `skills/aws-vpc-dns-investigation`
- [Support cases](https://github.com/aws/tools-for-devops-agent/tree/main/skills/support-cases): `skills/support-cases`

### Agent workflows

- [Custom agents](https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents): `custom-agents`
- [Health report](https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents/aws-health-report): `custom-agents/aws-health-report`
- [Operation review](https://github.com/aws/tools-for-devops-agent/tree/main/custom-agents/aws-operation-review): `custom-agents/aws-operation-review`

### Operational MCP tools

- [MCP servers](https://github.com/aws/tools-for-devops-agent/tree/main/mcp): `mcp`
- [EKS diagnostics](https://github.com/aws/tools-for-devops-agent/tree/main/mcp/aws-eks-node-diagnostics-mcp): `mcp/aws-eks-node-diagnostics-mcp`
- [ECS log analysis](https://github.com/aws/tools-for-devops-agent/tree/main/mcp/ecs-instance-log-mcp): `mcp/ecs-instance-log-mcp`
- [VPC DNS diagnostics](https://github.com/aws/tools-for-devops-agent/tree/main/mcp/aws-vpc-dns-diagnostics-mcp): `mcp/aws-vpc-dns-diagnostics-mcp`
- [Aurora diagnostics](https://github.com/aws/tools-for-devops-agent/tree/main/mcp/rds-aidba): `mcp/rds-aidba`
- [DNS simulation model](https://github.com/aws/tools-for-devops-agent/blob/main/mcp/aws-vpc-dns-diagnostics-mcp/src/dns_model.py): `mcp/aws-vpc-dns-diagnostics-mcp/src/dns_model.py`
- [ECS analysis handler](https://github.com/aws/tools-for-devops-agent/blob/main/mcp/ecs-instance-log-mcp/src/lambda/ecs-log-automation.py): `mcp/ecs-instance-log-mcp/src/lambda/ecs-log-automation.py`

### Permissions

- [Skill IAM policies](https://github.com/aws/tools-for-devops-agent/blob/main/cloudformation/devops-agent-skill-policies.yaml): `cloudformation/devops-agent-skill-policies.yaml`

### Other components

- **Operator**
- **AWS DevOps Agent**
- **AWS operational services**
- **AWS IAM**

## Connections

- Operator → AWS DevOps Agent: starts investigation
- AWS DevOps Agent → Skills catalog: uses knowledge
- AWS DevOps Agent → Custom agents: runs workflows
- AWS DevOps Agent → MCP servers: retrieves data
- Skills catalog → Health events: includes
- Skills catalog → DNS investigation: includes
- Skills catalog → Support cases: includes
- Custom agents → Health report: includes
- Custom agents → Operation review: includes
- MCP servers → EKS diagnostics: includes
- MCP servers → ECS log analysis: includes
- MCP servers → VPC DNS diagnostics: includes
- MCP servers → Aurora diagnostics: includes
- VPC DNS diagnostics → DNS simulation model: uses model
- ECS log analysis → ECS analysis handler: handles requests
- EKS diagnostics → AWS operational services: collects diagnostics
- ECS log analysis → AWS operational services: retrieves logs
- VPC DNS diagnostics → AWS operational services: reads DNS config
- Aurora diagnostics → AWS operational services: reads database health
- Skill IAM policies → AWS IAM: provisions permissions