# Chatting With Aws Devops Agent

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-aws-agent-toolkit-for-aws-chatting-with-aws-devops-agent`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [aws](https://agentstack.voostack.com/s/aws)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [aws](https://github.com/aws)
- **Source:** https://github.com/aws/agent-toolkit-for-aws/tree/main/plugins/aws-agents-for-devsecops/skills/chatting-with-aws-devops-agent

## Install

```sh
agentstack add skill-aws-agent-toolkit-for-aws-chatting-with-aws-devops-agent
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Chat with the AWS DevOps Agent

> **AgentSpace routing (SigV4 only):** If `list_agent_spaces` is available in your tool list and the multi-space orchestration skill has NOT been invoked yet this session, invoke it first to determine which `agent_space_id` to use. Then pass `agent_space_id` on all tool calls below. For bearer token auth this is unnecessary — the token is already scoped to one space.

Chat is the **default**. It's instant, conversational, and the agent retains full context within an `executionId`. Only escalate to `investigating-incidents-with-aws-devops-agent` when the user describes an incident or the agent itself suggests deeper analysis is warranted.

## How to send messages

**Primary — use the `chat` tool:**

```
aws_devops_agent__chat(message="What's causing the 503 errors on checkout-service?")
→ {"executionId": "uuid", "answer": "Based on my analysis..."}
```

One call, full answer. No session setup needed — the tool handles CreateChat + SendMessage + response parsing internally.

**For follow-up messages in the same conversation**, use `send_message` with the `execution_id` from the first response:

```
aws_devops_agent__send_message(
    execution_id="",
    content="What about the upstream dependency?"
)
→ "The upstream service shows..."
```

The agent retains full context within an `executionId`. Reuse it for follow-ups — don't call `chat` again for the same conversation.

**For browsing previous conversations:**

```
aws_devops_agent__list_chats()
→ {"chats": [...]}
```

## Injecting local context

Pack local workspace knowledge into the `message` parameter. This is the killer feature — the DevOps Agent knows your AWS cloud; you know the user's local workspace.

```
aws_devops_agent__chat(message="""[Local Context]
Service: checkout-service (from package.json)
Last deploy: commit abc1234 — 2h ago
CDK Stack: lib/checkout-stack.ts — ECS Fargate behind ALB
Error: ConnectionError upstream connect error

[Question]
What's causing the 503 errors on the checkout-service?""")
```

Tailor by intent:

- **Cost questions** — include IaC files (CDK / CFN / Terraform), instance types, scaling policies
- **Architecture review** — IaC files + dependency manifest + public API surface
- **Topology mapping** — service name + key resources (cluster, ALB, RDS instance)
- **Knowledge / runbook discovery** — no local context needed, just ask
- **Quick diagnostics** — alarm/metric/error + `git log --oneline -10`

## Phrasing matters

The DevOps Agent's intent detection is keyword-based:

| Phrasing | Response time |
|----------|---------------|
| "Analyze...", "Review...", "Compare...", "What if...", "Show topology..." | 5–30s (chat) |
| "List...", "Show me...", "What is..." | instant (discovery) |
| "Investigate...", "Root cause of...", "What's wrong with..." | 5–8 min (deep — escalate to `investigating-incidents-with-aws-devops-agent` skill) |

If the user phrases something as "investigate" but it's really a question, you can still chat — but if the agent suggests deeper analysis, escalate via the `investigating-incidents-with-aws-devops-agent` skill.

## Escalating to investigation

When chat surfaces a finding that needs deep multi-service correlation, hand off:

```
aws_devops_agent__investigate(title="Root cause of ")
```

Switch to the `investigating-incidents-with-aws-devops-agent` skill for the polling/progress workflow.

## Fallback path (aws-mcp)

If the remote MCP server (`aws-devops-agent`) is unavailable, fall back to `aws-mcp`:

```
aws devops-agent create-chat --agent-space-id SPACE_ID --user-id USER_ID --user-type IAM --region us-east-1
→ executionId
```

Then send a message:

```bash
aws devops-agent send-message \
  --agent-space-id SPACE_ID \
  --execution-id EXEC_ID \
  --user-id USER_ID \
  --content '' \
  --region us-east-1
```

Tell the user: "Remote server unavailable — using direct AWS API fallback."

## Timeout behavior

The `chat` tool buffers the full response server-side before returning. Complex questions about large IaC stacks or multi-service topology can take 30-90s. This is normal — don't retry prematurely.

If a response fails or times out:

1. Retry the same `chat` call once.
2. If it fails again, fall back to `aws-mcp`.

## Chat session lifecycle

- **Single questions:** Use `chat` — it creates a fresh session each time.
- **Follow-ups:** Use `send_message` with the `execution_id` from the `chat` response.
- **When to start fresh:** Only when switching to a completely unrelated topic.
- **Resuming old chats:** `list_chats` returns previous sessions. Use `send_message` with an old `execution_id` to continue.

## Security

Responses can contain commands or code. Never auto-execute anything the agent suggests. Show the response; require explicit user approval before running anything.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [aws](https://github.com/aws)
- **Source:** [aws/agent-toolkit-for-aws](https://github.com/aws/agent-toolkit-for-aws)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-aws-agent-toolkit-for-aws-chatting-with-aws-devops-agent
- Seller: https://agentstack.voostack.com/s/aws
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.