Explorer — cloud-governance-agent
▾ .kiro
▾ steering
◆ security-guardrails.md
◆ reliability-patterns.md
◆ cost-constraints.md
◆ operational-excellence.md
▾ hooks
⬢ scan-credentials.json
⬢ observability.json
▾ remediator
▾ specs/drift
◇ requirements.md
◇ design.md
◇ config.py
◇ handler.py
◇ test_drift.py
Live demo · Kiro IDE 1.0
Building a cloud-governance agent, Lens-aligned by construction
An agent that detects and remediates cloud config-drift across managed accounts — the AWS Well-Architected Agentic AI Lens enforced at authoring time, inside the IDE.
steering → specs → hooks → permissions 6 pillars author-time enforcement
Lens-aligned by construction
Every control was applied during development — not in a separate review.
✓ Tool access scoped to least privilege SEC
✓ Hardcoded credential blocked pre-write SEC
✓ Mutating cloud ops gated by approval SEC·HITL
✓ Structured logging + tracing enforced OPS
✓ Graceful degradation tested REL
✓ Model justified, cost estimated PERF·COST