AWS VP plans Amazon Bedrock Agents observability and more
Presenters detail vulnerability discovery and exploitation in AWS VP plans Amazon Bedrock Agents observability and more.
Summary
### Overview In this episode of *IT Ops Query* (Season 3: Observability in the Age of AI), host Beth Pariseau interviews Nandini Ramani, Vice President at Amazon Web Services (AWS) overseeing search, observability, and cloud operations. Ramani discusses how generative AI is transforming observability by analyzing telemetry and accelerating incident resolution, while simultaneously introducing new challenges as agentic systems scale. The discussion highlights the convergence of observability, security, and compliance, as well as AWS's strategy to monitor AI stacks comprehensively from underlying silicon up to multi-agent interactions.
### Key Topics - **Generative AI's Dual Role**: GenAI assists operations by rapidly sifting through logs, metrics, and traces across modern architectures (microservices and ephemeral serverless functions) using natural language interfaces. However, the rise of autonomous and collaborating agents creates dynamic, non-linear execution paths that significantly complicate end-to-end tracing. - **Full-Stack AI Observability**: Complete visibility requires monitoring across multiple layers: silicon and GPUs, foundation model infrastructure (such as Amazon Bedrock and Nova models), training and inference operations, and the high-level agentic applications interacting with storage and services. - **Convergence of Observability, Security, and Compliance**: Operational troubleshooting and threat detection rely on shared telemetry datasets (such as VPC flow logs and WAF logs) and shared roots in CI/CD application code. This convergence strengthens proactive DevSecOps practices and unified incident investigation. - **Automated Remediation and the Evolving Human Role**: The operational workflow is progressing from reactive alerts to AI-assisted on-call triage, toward self-healing architectures with automated remediation within predefined guardrails. Human engineers shift focus from manual debugging to high-level system orchestration, responsible governance, and innovation.
### Technical Details - **Scale of Telemetry**: Ramani notes the scale handled by AWS services, with Amazon CloudWatch monitoring over 11 quadrillion metric observations, ingesting exabytes of logs, sending 400 billion OpenTelemetry metric updates weekly, and pairing with AWS EventBridge to trigger more than 32 trillion events per month. - **Knowledge-Based RCA and Diagnostics**: AWS trains models on its 19 years of operational infrastructure data, failure modes, and service topology graphs, allowing AI systems to assign probability scores (e.g., 80% to 90% likelihood) to pinpoint root causes across AWS services, GPUs, and user applications. - **Tooling and Integration**: AWS aims to integrate operational tools—including CloudWatch, OpenSearch, GuardDuty, and Bedrock—while supporting open architectures, hybrid/on-prem environments, multi-cloud deployments, and partner tools (such as Splunk) via external data lake queries. - **Addressing Model Transparency**: Managing the AI "black box" involves auditing agent-generated code, tracking introduced vulnerabilities, verifying actions across storage layers like S3 tables, and using automated reasoning to address model hallucinations.
### Takeaways As organizations build and deploy complex multi-agent architectures, observability and security must be deeply integrated rather than treated as isolated silos. While AI agents will increasingly automate root-cause analysis and execute autonomous remediations, organizations must implement robust tracing and auditing from the silicon level up to maintain accountability and system resilience.
Related talks
Eye on Tech·10 min
Security researchers examine technical aspects of How to Use Amazon Kinesis to Analyze AWS Streaming Data.
Eye on Tech·4 min
Presenters detail vulnerability discovery and exploitation in Get Started with AWS Fargate on Amazon ECS.
fwd:cloudsec·18 min
Dan Gansel
Dan Gansel explores No Way Out? C2 Through AWS Data Perimeter via Bedrock-AgentCore.


