kiro  cloud-governance-agent
KIRO CLI 3.0
requirements.md

        

        

          
▸ kiro — agent session  ·  spec-driven workflow

          

        

      

    


    

      READY
      Press play to start the walkthrough.
    


    
    

      
Live demo · Kiro CLI 3.0

      
Building a cloud-governance agent, Lens-aligned by construction

      
An agent that detects and remediates cloud config-drift across managed accounts — with the AWS Well-Architected Agentic AI Lens enforced at authoring time, not bolted on after.

      

        steering → specs → hooks → permissions
        6 pillars
        author-time enforcement
      

    


    
    

      
Lens-aligned by construction

      
Every control was applied during development — not in a separate review.

      

        
✓ Tool access scoped to least privilege SEC

        
✓ Hardcoded credential blocked pre-write SEC

        
✓ Mutating cloud ops gated by human approval SEC·HITL

        
✓ Structured logging + tracing enforced OPS

        
✓ Graceful degradation tested REL

        
✓ Model choice justified, cost estimated PERF·COST

      

    


    

  


  

    
    
    
    
scene 0/8

  

  
Plays one beat then pauses — press Space or Next ▶ to advance · R replay from start · F fullscreen. Controls stay visible while paused. Built for live screen-share and screen capture.