BedrockSentinel: AWS FinOps & IaC Agent

Inspiration

What it does

How we built it

Challenges we ran into

Accomplishments that we're proud of

Inspiration

Managing AWS infrastructure costs and maintaining security compliance at scale is increasingly complex for modern engineering teams. Cloud bills spiral out of control when provisioned Infrastructure as Code (IaC) lacks real-time cost estimation and FinOps governance. We wanted to build an intelligent, automated guardian powered by Amazon Bedrock that analyzes IaC before deployment, detects cost anomalies, and enforces security guardrails.

What it does

BedrockSentinel is an advanced AWS FinOps and IaC Agent that:

• Analyzes Terraform & CloudFormation: Parses infrastructure definitions to evaluate architectural patterns.
• Cost Forecasting & Optimization: Leverages Amazon Bedrock foundation models to estimate monthly AWS spend and suggest cheaper instance types, right-sizing, and reserved capacity.
• Security & Compliance Guardrails: Detects over-privileged IAM policies, unencrypted S3 buckets, and public exposure risks.
• Automated Remediation: Generates secure, cost-optimized code patches directly in pull request workflows.

How we built it

• Amazon Bedrock: Utilizes state-of-the-art LLMs (Claude 3.5 Sonnet / Llama 3) for deep contextual code analysis.
• Python & Boto3: Core agent orchestration and AWS SDK integration.
• IaC Parsers: Custom AST parser for Terraform HCL and CloudFormation YAML templates.
• Web Dashboard: Interactive UI built for cloud architects and finance teams to track optimization metrics.

Challenges we ran into

Handling large, multi-module Terraform dependency trees and mapping them to accurate AWS pricing APIs with minimal latency required careful caching and prompt structuring.

Accomplishments that we're proud of

• Successfully achieving 35% average simulated cost reduction across test enterprise architectures.
• Zero-latency policy checking integrated directly into CI/CD pipelines.

What we learned

Deep insights into enterprise cloud cost management patterns and how foundation models on Amazon Bedrock can drastically simplify complex DevOps and FinOps operations.

What we learned

What's next for BedrockSentinel: AWS FinOps & IaC Agent

Built With

• amazon-web-services
• artificial
• intelligence
• python
• terraform