Aws Ops

AWS Operations Toolkit - Unified incident investigation and daily operational visibility.

This extension provides workflows for investigating AWS outages and running daily infrastructure pulse checks. Gathers data from CloudWatch Logs, Metrics, Alarms, X-Ray Traces, resource inventory, networking, Cost Explorer, and GitHub.

Quick Start

# Install the extension (auto-resolves dependencies)
swamp extension pull @webframp/aws-ops

# Create model instances for your region
swamp model create @webframp/aws/logs aws-logs --global-arg region=us-east-1
swamp model create @webframp/aws/metrics aws-metrics --global-arg region=us-east-1
swamp model create @webframp/aws/alarms aws-alarms --global-arg region=us-east-1
swamp model create @webframp/aws/traces aws-traces --global-arg region=us-east-1
swamp model create @webframp/aws/inventory aws-inventory --global-arg region=us-east-1
swamp model create @webframp/aws/networking aws-networking --global-arg region=us-east-1

# Run the investigate-outage workflow
swamp workflow run @webframp/investigate-outage

Required IAM Permissions

• logs:DescribeLogGroups
• logs:StartQuery
• logs:GetQueryResults
• logs:FilterLogEvents
• cloudwatch:ListMetrics
• cloudwatch:GetMetricStatistics
• cloudwatch:GetMetricData
• cloudwatch:DescribeAlarms
• cloudwatch:DescribeAlarmHistory
• xray:GetServiceGraph
• xray:GetTraceSummaries

Included Components

Workflows

• @webframp/investigate-outage - Unified incident investigation workflow that:
  • Gathers alarm summary and active alarms
  • Analyzes Lambda Duration/Errors and ELB 5XX/latency metrics for anomalies
  • Gets X-Ray service dependency graph
  • Finds error traces and analyzes error patterns
  • Lists CloudWatch log groups and searches for error patterns
  • Inventories EC2 instances and Lambda functions
  • Lists load balancers and NAT gateways with health status
  • Gets alarm state change history
  • Generates an incident report summarizing all findings

Reports

• @webframp/incident-report - Workflow-scope report that aggregates findings into:
  • Alarm status and recent state changes
  • Metric anomaly highlights (Lambda + ELB)
  • Trace error analysis with top faulty services
  • Infrastructure inventory (EC2, Lambda)
  • Networking status (load balancers, NAT gateways)
  • Actionable recommendations

Model Dependencies

The workflow expects these model instances (create them before running):

• aws-logs - @webframp/aws/logs
• aws-metrics - @webframp/aws/metrics
• aws-alarms - @webframp/aws/alarms
• aws-traces - @webframp/aws/traces
• aws-inventory - @webframp/aws/inventory
• aws-networking - @webframp/aws/networking