review_agentcore
Review Amazon Bedrock AgentCore deployments from Terraform JSON plans locally, flag Well-Architected risks with fixes, and optionally attribute FOCUS bill costs.
Instructions
Well-Architected review of an Amazon Bedrock AgentCore deployment, run locally on terraform show -json output (a saved plan or state; nothing is sent anywhere, no AWS credentials). Coded rules check every Runtime, Harness and Gateway and the IAM, logs and alarms around them: public network, unauthenticated or debug gateways, InvokeModel on every model, secrets in environment variables, idle and lifetime settings, harness caps, log retention, alarms and cost tags. Each finding has severity, pillar, resource address, a Terraform fix and the AWS doc it rests on. Given a FOCUS bill (and a tag such as agent=genie) it adds what the agent costs by component and the prompt-caching and over-list-price savings. Use for: 'review our AgentCore setup', 'is this agent production-ready', 'what does this agent cost and what should we fix'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tag | No | Optional key=value tag that marks this agent's lines in the bill, e.g. agent=genie. | |
| skips | No | Findings accepted on purpose, reported as skipped. | |
| bill_path | No | Optional local FOCUS export (.csv or .csv.gz). | |
| plan_path | Yes | Local path to `terraform show -json` output (.json). |