AWS previews Well-Architected Agent for infrastructure reviews

AWS announced AWS Well-Architected Agent in preview on October 1, 2026. The company says the AI-powered service analyzes AWS infrastructure across cost, security, performance and reliability, and describes it as an evolution of Trusted Advisor and the Well-Architected Tool.

From infrastructure findings to proposed fixes

According to AWS, the agent correlates metrics and application topology with Well-Architected best practices. Teams can define business goals and receive recommendations prioritized by impact and effort at resource, application and architecture levels. The agent also reviews Terraform, CDK and CloudFormation templates, identifies gaps and returns proposed infrastructure-as-code changes.

Where applicable, AWS says recommendations include SSM runbooks, prescriptive CLI scripts or guided console walkthroughs. Its launch example describes a reliability-focused recommendation to add multi-AZ failover to a critical database, accompanied by a runbook to automate the configuration change and an analysis of its cost and performance effects. This is an illustration of the announced capability, not a measured result.

Why cross-pillar analysis matters

For engineers, the potentially useful shift is connecting a finding to both an implementation path and its trade-offs. Seeing the cost and performance implications alongside a reliability recommendation could make prioritization more actionable than a standalone best-practice warning.

Automation-ready output should still undergo workload-specific validation. Teams evaluating the preview should check proposed changes against application dependencies, deployment controls and rollback requirements. Returned IaC changes provide a natural point for code review and testing, rather than a reason to bypass existing change-management processes.

Preview access and workload coverage

AWS lists access to the agent and its recommendations in US East (N. Virginia), US East (Ohio) and US West (Oregon). It separately says workloads can be onboarded from any AWS commercial Region: the three access Regions are not the limit on workload onboarding.

According to the preview announcement, the service is delivered by AWS Support and is available to AWS customers with an AWS Support plan.