What's new
The following table lists new features, improvements, and fixes for AWS DevOps Agent. For an index of new pages added to the documentation, see Document history.
| Date | Change | Description |
|---|---|---|
| September 22, 2026 | Registering GitHub with a custom GitHub App | You can now choose Custom app when you register GitHub.com. AWS DevOps Agent creates a private GitHub App in your GitHub account or organization, and you own that app. You choose read-only or read and write access when GitHub creates the app. |
| September 14, 2026 | Run custom agents from webhook events | You can now run a custom agent when a webhook event arrives from a connected integration, rather than only on a schedule. Any integration with an active webhook can be the event source. An optional JMESPath filter expression controls which events run the agent and what part of the payload the agent receives. For more information, see Creating an event trigger. |
| September 11, 2026 | Retrieve an investigation or mitigation summary from an EventBridge event | The EventBridge guide now shows how to turn the summary_record_id in a Completed event into the summary text. It names ListJournalRecords as the operation to call, maps each event field to a request parameter, and adds an AWS CLI command and an AWS Lambda consumer example. |
| September 10, 2026 | Review verification test results on the Tests tab | When a change has verification test results, the change detail view now includes a Tests tab with the executed tests and their outcomes. On a connected GitHub, GitLab, or Azure DevOps repository, the pull request or merge request comment also includes a View test report link. This link opens the change directly on the Tests tab. |
| September 10, 2026 | Association permissions follow Agent Space tags | GetAssociation, UpdateAssociation, DisassociateService, and ListWebhooks now also require authorization on the parent Agent Space. As a result, aws:ResourceTag conditions on an Agent Space apply to its associations. Update policies that grant these actions only on an association ARN to also grant them on the Agent Space ARN. |
| September 8, 2026 | Add one HMAC and one API key webhook to an Agent Space | Each Agent Space can now have two Agent Space webhooks: one HMAC webhook and one API key webhook. The Agent Space Webhook table lists each webhook as a row. Copy URL, Edit, and Remove act on the row that you select. |
| September 4, 2026 | Connect GitHub with a personal access token | You can now register GitHub with a personal access token instead of installing the AWS DevOps Agent GitHub App. Use this option for individual access when you do not need webhook-based features such as automated code reviews. You can also verify an existing GitHub App installation with a personal access token instead of the browser redirect. |
| September 4, 2026 | Reflections memory store | AWS DevOps Agent now learns from your corrective feedback on past investigations. When you submit feedback on an investigation, the agent records a reflection so future investigations of the alarm can avoid the same mistake. View reflections on the Memories tab of the Knowledge page. |
| September 3, 2026 | Manage skills, agents, and triggers with the AWS CDK and Terraform | You can now define skills, custom agents, and scheduled triggers as infrastructure as code with the AWS CDK and Terraform, in addition to AWS CloudFormation. Use the CfnAsset and CfnTrigger constructs in aws-cdk-lib 2.268.0 or later. For Terraform, use the awscc_devopsagent_asset and awscc_devopsagent_trigger resources in the awscc provider 1.98.0 or later. For more information, see the AWS CDK and Terraform getting-started guides. |
| September 1, 2026 | AWS DevOps Agent now supports the Incident UI agent for skills and agent instructions | You can now target DevOps Agent Skills and set agent instructions (AGENTS.md) for the Incident UI agent. It generates an investigation's outputs, including those posted to other platforms. Use instructions and skills to shape what it produces. |
| September 1, 2026 | Chat with AWS DevOps Agent in Slack | You can now start and continue conversations with AWS DevOps Agent directly from a private Slack channel. Enable bidirectional communication when you associate a channel, then run a one-time setup command and chat using app mentions. |
| August 31, 2026 | Multi auth headers authentication for MCP servers | You can now register an MCP server that authenticates with up to three secrets, each sent in an HTTP header that you name. Use this for servers that need more than one credential, such as Datadog, which expects both an API key and an application key. AWS DevOps Agent stores the secrets encrypted and does not display them again. A server registered this way can't be updated in place. |
| August 31, 2026 | Chat with an investigation | You can now send a message directly to an investigation while it runs. Choose Chat with investigation on the investigation details page to redirect the agent's focus or give it information it does not have. You can also message a completed investigation to resume it with its full prior context. |
| August 31, 2026 | Troubleshooting private connections | The troubleshooting guide now covers TLS certificates that aren't trusted, including how to use a private certificate authority, and the error you get when you delete a private connection that a capability provider still uses. Create failed now tells you to read the failureMessage field first. A new Host address and endpoint URL section explains why those two values are separate and how to set them when your hostname is private to your VPC. Create a private connection now states that a service-managed resource gateway is created in the same account as the connection, and gives both ways to reach a target that runs in another AWS account or on premises. |
| August 27, 2026 | Private connections for remote A2A agents | You can now connect a remote A2A agent that runs on a private network. Select "Connect to endpoint using a private connection" in the authentication details when you register a remote agent, then choose an existing private connection or create a new one. Your agent no longer needs a publicly reachable endpoint. Supported with API key, bearer token, and OAuth client credentials authentication. Private connections are not supported with SigV4 authentication. |
| August 27, 2026 | Private connectivity for GitLab Self-Managed | You can now connect a GitLab Self-Managed instance that is not publicly accessible by selecting an existing AWS DevOps Agent private connection during registration. The guide also includes troubleshooting steps for missing GitLab projects and private endpoint registration failures. |
| August 27, 2026 | Creating your own memory stores | You can now create your own memory stores to group operational knowledge for a team, a service, or a recurring problem. Create a store from the console or by chatting with AWS DevOps Agent, and give it a clear description that the agent uses to decide when the store is relevant. |
| August 27, 2026 | Give custom agents their own memory stores | You can now attach memory stores to a custom agent so it has focused, informational context. A custom agent reads and writes only the stores you attach, so you give it the knowledge its job needs. For more information, see Creating a custom agent. |
| August 27, 2026 | Learned skills are now maintained as memory | AWS DevOps Agent now maintains your learned skills—your topology, code dependencies, pipeline structure, and tool-use patterns—as memory. The change is automatic and needs no action from you. View your learned skills on the Memories tab of the Knowledge page. |
| August 27, 2026 | Organizing memories into folders | You can now organize memories into folders: a memory's name is its path within the store, so grouping related memories under a shared prefix (for example, alarms/) creates a browsable folder structure. The agent uses it with progressive disclosure to open only the memories relevant to a task, and the operator app displays the same structure. |
| August 26, 2026 | Troubleshoot private connection port ranges | The documentation now explains that a private connection created without port ranges allows only port 443, and that the connection drops traffic to other ports without a descriptive error. If your endpoint uses a non-standard port, include it in the connection's port ranges when you create the connection. |
| August 25, 2026 | AWS DevOps Agent now ties chat history to access token lifecycle | When you rotate an access token, chats that you created with the previous token no longer appear through the remote server. The new token starts a fresh chat history. |
| August 25, 2026 | Working with directed actions | You can now let AWS DevOps Agent take directed actions against your connected services and AWS accounts. Directed actions are operations you explicitly ask the agent to perform. Read-only actions are available by default. Directed actions that create or modify resources are disabled by default. The new page adds a worked example that executes a mitigation plan from an investigation. It documents enabling directed actions through the agent space preferences API and the AIDevOpsAgentActionsPolicy managed policy. It also describes the guardrails the agent enforces on its own operations. Every approval and action is attributable to the approving operator in AWS CloudTrail. |
| August 24, 2026 | Manage user and group access in your identity provider | When you connect an OIDC identity provider directly to an Agent Space, you can now follow documented steps to grant and revoke web app access. Steps are available for both Okta and Microsoft Entra ID. They also cover requiring assignment on the Entra ID enterprise application, so that only assigned users and groups can sign in. |
| August 19, 2026 | AWS DevOps Agent now supports the Release testing agent for skills and agent instructions | You can now target DevOps Agent Skills and set agent instructions (AGENTS.md) for the Release testing agent. It runs automated UI and API testing against deployed web applications and REST APIs. |
| August 17, 2026 | DevOps Agent Tools repository moved to the aws GitHub organization | The community-contributed tools repository and skills gallery moved to the aws GitHub organization. For the repository, see tools-for-devops-agent |
| August 14, 2026 | Multiple Splunk deployments per Agent Space | You can now register more than one Splunk deployment in an AWS account. You can also associate multiple Splunk registrations with a single Agent Space. This capability is already supported for Datadog, New Relic, and other providers. During investigations, you can query each deployment independently. |
| August 14, 2026 | Live investigation summaries | With the new Summary tab, you can view a concise investigation summary that updates as AWS DevOps Agent works. Review the current impact, cause hypothesis, next steps, key metrics, tasks, mitigation actions, and supporting evidence in one place. Use the Timeline tab when you need the full chronological record. |
| August 14, 2026 | Route AWS Support cases in your Agent Space language | When you create a support case through AWS DevOps Agent, the agent routes it in your Agent Space's configured response language, so a support engineer who speaks that language handles the case. Supported languages are Chinese, English, French, Japanese, Korean, Portuguese, and Spanish. If you have not configured a language, or the case category does not support the configured language, the case defaults to English. |
| August 13, 2026 | Import custom agents from a GitHub repository | You can now create a custom agent by importing its system prompt from a Markdown file in a GitHub repository. This includes GitHub Enterprise Server and GitHub Enterprise Cloud with data residency instances. Sync the agent on demand to pull the latest system prompt from the source file. |
| August 13, 2026 | Rotate webhook credentials | You can now rotate the credentials of any webhook from the Capabilities tab. Rotation generates a new secret and keeps the same webhook URL. Use rotation to get the secret if you lose it. Rotation also helps after you register an integration with infrastructure as code, because the stack does not return the secret as an output. |
| August 13, 2026 | Manage assets and triggers with AWS CloudFormation | You can now manage every asset type declaratively as AWS::DevOpsAgent::Asset resources with AWS CloudFormation. Supported asset types include skills, AGENTS.md files, custom agents, attachments, memory stores, memories, test profiles, and feedback. You can also run a custom agent on a schedule by adding an AWS::DevOpsAgent::Trigger resource to the same template. Define assets and triggers as infrastructure as code, deploy them through a pipeline, and reproduce them across Agent Spaces. |
| August 12, 2026 | Register SigV4 MCP servers without a dedicated role | You can now register a SigV4 MCP server without a dedicated IAM role. AWS DevOps Agent signs requests using the primary or secondary AWS account role associated with your Agent Space, which enables cross-account access to your MCP server. |
| August 11, 2026 | Export the topology as PNG, JSON, or Mermaid | You can now export the current topology view from the Topology page using the Download menu. Choose PNG for an image, JSON for a structured representation, or Mermaid for diagram source you can embed in documentation. The export reflects the view selected in the Show menu. |
| August 10, 2026 | iam:PassRole now required to connect a secondary AWS account | When you connect or update a secondary AWS account, you must now have permission to pass an IAM role in the primary account. Add iam:PassRole to your identity policy, scoped to arn:aws:iam::<account-id>:role/* with the condition iam:PassedToService set to aidevops.amazonaws.com. If you use least-privilege policies, add this permission before you connect AWS sources. |
| August 7, 2026 | Update capability provider credentials in place | You can now rotate credentials for a registered capability provider without deregistering and re-registering it. Your Agent Space associations are preserved. |
| August 5, 2026 | Extend agent permissions with the ReadOnlyAccess managed policy | The permission guardrail now supports every action in the ReadOnlyAccess AWS managed policy, plus athena:StartQueryExecution, athena:StopQueryExecution, and kms:Decrypt. You can enable any of these permissions for the agent by adding them to your role as an inline policy. |
| August 4, 2026 | Print a long investigation as a complete PDF | When you print or save an investigation as a PDF, the PDF now contains the entire investigation. Previously, AWS DevOps Agent truncated a long investigation to a single page. |
| August 3, 2026 | Troubleshooting private connections | A new troubleshooting page helps you resolve common private connection problems, including host addresses that don't resolve (public versus in-VPC DNS), connections stuck in Create failed, capability registration timeouts on an active connection, OAuth token exchange routing, and resource gateways or ENIs that remain after deletion. |
| July 31, 2026 | Source IP addresses added for all supported Regions | The network connectivity guidance now lists the AWS DevOps Agent source IP addresses to allowlist for publicly hosted tools in every supported Region. If you use IP allowlisting or firewall rules, add the IP addresses for your Region. |
| July 30, 2026 | AWS DevOps Agent now supports model tier selection in chat | You can now choose a model tier for a chat conversation to balance response quality against speed. Select Smart for complex, multi-step problems, Balanced for everyday chat and troubleshooting, or Fast for quick questions and simple lookups. The choice applies to each conversation and defaults to Balanced. |
| July 29, 2026 | Multiple registrations and multiple Agent Space associations per service | You can now create more than one registration per service in an AWS account, and associate more than one registration of the same service with a single Agent Space. This applies to Datadog, Dynatrace, Grafana, New Relic, PagerDuty, ServiceNow, Slack, GitHub, GitLab, Azure DevOps, and Azure Resources. If you manage several accounts, organizations, instances, or environments for the same service, then you no longer need a separate Agent Space for each one. |
| July 27, 2026 | Import skills from GitHub Enterprise | You can now import skills from GitHub Enterprise Server and GitHub Enterprise Cloud repositories into your Agent Space. To get started, connect your GitHub Enterprise instance. Then use the Import from repository flow to add skills from your enterprise repositories. |
| July 27, 2026 | GitHub Organization administration read permission | The AWS DevOps Agent GitHub App now requests Organization administration (read) permission. This permission lets the agent verify that the GitHub App is installed in your target organization. |
| July 27, 2026 | Subscribe to the What's New RSS feed | You can subscribe to the What's New RSS feed to receive updates when new features and fixes are released. |
| July 27, 2026 | Changing the display language | You can now select your preferred display language in the AWS DevOps Agent web app. Choose a language from the language selector on the Settings page. The web app updates immediately to display in the selected language. |
| July 27, 2026 | Dynamic subagent delegation for custom agents | Custom agents now use dynamic subagent delegation to complete long-running sessions without hitting context window limits. When an invocation approaches its context limit, the agent automatically delegates to a subagent that has access to the same tools and skills. No configuration is required. |
| July 27, 2026 | Sandbox environment isolation | AWS DevOps Agent runs each sandbox in an isolated Lambda MicroVM scoped to a single investigation. AWS CLI and SDK calls from the sandbox are proxied and limited to read-only operations, so sandbox code cannot modify or delete your AWS resources. |
| July 27, 2026 | Inline mitigation proposals | When an alarm triggers an investigation, AWS DevOps Agent now presents mitigation proposals directly in the investigation view. You can review and refine each proposal before applying it. Investigation and mitigation run as a single automated flow, with no separate handoff step. |
| July 27, 2026 | Release Manager tools for custom agents | Custom agents can now use Release Manager tools to create, list, get, and cancel Release Manager tasks. Your agent can also analyze a release readiness review report to surface findings and recommended actions. |
| July 27, 2026 | Starting an investigation from Chat | In AWS DevOps Agent chat, you see a prompt to create a formal investigation when a complex issue comes up. You do not need to wait for the analysis to complete in the conversation. Choose the prompt to launch an investigation for a more thorough analysis. |
| July 24, 2026 | Release readiness code reviews | Documented that automated PR/MR code review triggers are available only for private repositories. If you use a public repository, you can request release readiness reviews through DevOps Agent chat or coding agent integrations. |
| July 23, 2026 | Set up a Sandbox | You can now let AWS DevOps Agent write and run code in a sandboxed Linux environment. During preview, the agent uses the sandbox only during investigations; support for chat, custom agents, and other DevOps Agent capabilities is coming soon. Opt in per Agent Space, control outbound network access with an explicit allowlist, and pre-install pip and npm packages. With Sandbox enabled, the agent also reads skills from the sandbox filesystem and can run code bundled with a skill. By default, the sandbox restricts outbound access to AWS service endpoints. |
| July 23, 2026 | Deregister capability providers from the Actions menu | The console now groups the Deregister control in an Actions menu that acts on the selected capability provider, instead of a button next to each row. To deregister a provider, select it and then choose Deregister from the Actions menu. |
| July 21, 2026 | Third-party integrations in the Terraform sample | The Terraform sample now supports registering third-party services (Dynatrace, ServiceNow, Splunk, New Relic, GitLab, and PagerDuty) with your Agent Space in the same terraform apply, mirroring the AWS CDK sample's IntegrationsStack. Datadog still requires manual registration through the console. |
| July 21, 2026 | Use existing IAM roles with the Terraform sample | You can now point the Terraform sample at pre-existing IAM roles instead of having it create new ones. Set existing_agentspace_role_arn and existing_operator_role_arn in terraform.tfvars to skip role creation. |
| July 21, 2026 | Datadog webhook payload template and variable mapping | The Datadog connection guide now includes a ready-to-use webhook payload template for monitor-triggered alerts, a table mapping Datadog webhook variables to the DevOps Agent webhook schema, and monitor configuration guidance. You can configure the Datadog webhook without constructing the payload yourself. |
| July 21, 2026 | CloudTrail logging for MCP and A2A access token authentication | AWS DevOps Agent now records an AuthenticateAccessToken event in AWS CloudTrail each time it authenticates an access token for an MCP or A2A remote server invocation. It records both successful and failed authentications. Use these events to audit who connected, from which IP address, and with which token. |
| July 10, 2026 | Automated investigations in AWS Support Assistant chat | When you create an AWS Support case, automated investigation findings stream into the Support Assistant chat. AWS assigns a support engineer after the automated investigation completes. |
| July 9, 2026 | Feature availability by Region | The Supported Regions page now shows feature availability at the top and in a dedicated table. You can quickly see which capabilities are available in each Region, including the release management preview limitation to US East (N. Virginia). |
| July 9, 2026 | Authentication steps visible in the investigation timeline | You can now see each authentication step AWS DevOps Agent takes to a downstream system. Each step shows its success or error status; on failure, you can also see the underlying browser steps. |
| July 9, 2026 | Read and list artifacts in chat | You can now read and list the artifacts that Chat has generated, directly in the conversation and without leaving chat. |
| July 9, 2026 | GitHub Enterprise Cloud with data residency support | You can connect AWS DevOps Agent to GitHub Enterprise Cloud with data residency instances hosted on *.ghe.com subdomains. |
| July 8, 2026 | Direct service-principal trust for secondary account roles | Secondary account roles now trust the AWS DevOps Agent service principal (aidevops.amazonaws.com) directly. Previously, they trusted the primary account role. The aws:SourceAccount and aws:SourceArn conditions provide confused deputy prevention scoped to your primary account and Agent Space. |
| July 7, 2026 | DevOps Agent Tools repository moved | The community-contributed DevOps Agent skills sample repository and skills gallery moved to new locations. For the updated repository, see tools-for-devops-agent |
| July 1, 2026 | Skills page retirement and Knowledge page | The standalone Skills page no longer exists. You now manage instructions, skills, and memories from the unified Knowledge page. Update any bookmarks that pointed to the previous Skills page. |
| June 30, 2026 | Connect the same GitHub organization across multiple AWS accounts and Regions | You can now connect AWS DevOps Agent in multiple AWS accounts and Regions to the same GitHub organization or account. If the AWS DevOps Agent GitHub App is already installed, additional accounts and Regions reuse the existing installation, so you don't need to reinstall it. |
| June 30, 2026 | Register multiple PagerDuty and Azure DevOps instances per Agent Space | You can now register more than one PagerDuty account or Azure DevOps organization to a single Agent Space. If you manage multiple PagerDuty accounts or Azure DevOps organizations, you no longer need a separate Agent Space for each integration. |
| June 30, 2026 | Share a Slack workspace across accounts | You can share a single Slack workspace across multiple AWS accounts, even when your Agent Space uses a customer managed key (CMK) for encryption. |
| June 30, 2026 | Overlapping workspace support | You can register the same Slack workspace with more than one Agent Space. Overlapping or duplicate Slack workspace installations across Agent Spaces or AWS accounts no longer collide. |
| June 30, 2026 | Open a new chat with the ?newChat query parameter | Add ?newChat to any DevOps Agent web app URL to open a fresh chat session. Use this parameter to link to a new conversation from external tools, runbooks, and bookmarks. |
| June 24, 2026 | Choose HMAC or API key authentication for Agent Space webhooks | When you create an Agent Space webhook, you can now choose between HMAC signature authentication and API key (bearer token) authentication. |
| June 23, 2026 | Multi-channel and multi-workspace Slack support | You can now connect multiple Slack workspaces to AWS DevOps Agent and associate more than one channel with an Agent Space. |
| June 23, 2026 | Configuring firewall rules for private connections | New guidance explains how to configure security group and firewall rules for privately-hosted tools. Traffic from AWS DevOps Agent arrives from Resource Gateway ENIs in your subnets, not from the static IP addresses used for publicly-hosted tools. |
| June 22, 2026 | Import skills from a repository using the SDK | You can now import skills from GitHub repositories programmatically using the AWS CLI and AWS SDKs. Pass a sourceUrl in the content field to import a skill directory or a single SKILL.md file, and sync it on demand to pull the latest changes. |
| June 19, 2026 | Monitor memories enabled by default | AWS DevOps Agent now enables the per-monitor memory store by default for all Agent Spaces. This store recalls recurring root causes for a specific alarm or metric. |
| June 17, 2026 | Improved remote server connection guidance | Updated client setup instructions with correct plugin names, links to Kiro power and Claude Code plugin, client type guidance, and an MCP configuration example for generic clients. |
| June 17, 2026 | Create custom agents, test profiles, and feedback with the Asset API | The Asset API now supports three additional asset types: custom agents, test profiles, and feedback. You can create and manage them programmatically alongside skills, AGENTS.md files, and attachments. |
| June 16, 2026 | Browse sample skills in the community skills gallery | A new community skills gallery lets you browse community-contributed AWS DevOps Agent sample skills before importing them into your Agent Space. |
| June 15, 2026 | Provide feedback on investigations | Provide structured accuracy feedback on completed investigations through the web app modal or conversational chat. The agent uses your feedback to track accuracy metrics over time. |
| June 14, 2026 | Integrate AWS Transform with release readiness code reviews | Configure release readiness code reviews to integrate with AWS Transform, so the agent can analyze code changes alongside automated transformation recommendations. |
| June 13, 2026 | Register multiple Datadog and ServiceNow instances per Agent Space | You can now register more than one Datadog environment or ServiceNow instance to a single Agent Space. If you manage multiple Datadog environments or ServiceNow instances, you no longer need separate Agent Spaces per integration. |
| June 13, 2026 | Scoped access tokens for MCP and A2A remote server authentication | Issue least-privilege access tokens scoped to specific permissions for external tools connecting to your Agent Space over MCP or A2A, instead of sharing broader credentials. |
| June 12, 2026 | DevOps Agent Memories | The agent now learns and recalls patterns from past investigations. Memories let the agent remember recurring root causes for monitors, environment-specific quirks, and your standing directives so it can investigate faster and more accurately. |
| June 12, 2026 | Connect to DevOps Agent remote servers | Connect IDEs, CLIs, and agent integrations to AWS DevOps Agent through dedicated MCP and A2A remote server endpoints. Supports access token and SigV4 authentication. |
| June 12, 2026 | Connect remote A2A agents | Add remote Agent-to-Agent (A2A) agents to your Agent Space so the DevOps Agent can call them as tools during investigations and chat. |
| June 12, 2026 | Custom agents | Create user-defined AI agents that automate operational tasks. Configure a system prompt, assign skills, manage executions, and configure outputs such as artifacts and recommendations. |
| June 12, 2026 | Five new AWS Regions | AWS DevOps Agent is now available in Asia Pacific (Mumbai), Asia Pacific (Singapore), Canada (Central), Europe (London), and South America (São Paulo). Agent Spaces in Mumbai, Singapore, and São Paulo route inference globally rather than within a single geography. |
| June 12, 2026 | Pipeline topology view | The Topology page now offers a Pipeline view that shows your CI/CD deployment stages, actions, and their relationships to infrastructure resources. This view appears once the agent learns your pipeline structure. |
| June 12, 2026 | Summary report | View a versioned, read-only summary of what AWS DevOps Agent knows about your environment, so you can verify the agent has accurate context and share that context with your team. Available on the Summary report tab on the Agent Space details page in the admin console, and in the Artifacts section of the DevOps Agent web app. |
| June 12, 2026 | Import skills from a repository | Import a skill into your Agent Space directly from a GitHub repository, so you can reuse and share skills across teams without manual file copying. Provide a URL to a directory or to a SKILL.md file, and the agent imports the skill files for you. |
| June 11, 2026 | Release management | Release readiness code reviews and release testing capabilities. Includes runtime role configuration, simulated verification, private VPC access, credential configuration, and CI/CD pipeline integration. |
| June 11, 2026 | Automated release readiness reviews on GitHub pull requests | Enable automated release readiness reviews on GitHub pull requests. Configure change review toggles and runtime roles for your connected GitHub repositories. |
| June 11, 2026 | Automated release readiness reviews on GitLab merge requests | Enable automated release readiness reviews on GitLab merge requests. Configure change review toggles and runtime roles for your connected GitLab projects. |
| June 11, 2026 | Two new learned skills: Code Dependencies and Pipeline Topology | AWS DevOps Agent now generates two additional learned skills: Understanding Code Dependencies (service-to-service and package dependency mapping) and Understanding Pipeline Topology (pipeline stage and environment promotion mapping). These skills help the agent trace impact across service boundaries and understand your deployment flow. |
| June 11, 2026 | Skills, instructions, and memories unified on the Knowledge page | Agent instructions (AGENTS.md), skills, and memories are now accessible from a single Knowledge page with three tabs. The sidebar nav label changed from "Skills" to "Knowledge." |
| June 8, 2026 | Manage agent assets with public APIs | Manage agent assets such as skills and knowledge programmatically through public, documented APIs, so you can automate agent configuration and integrate with CI/CD workflows. |
| June 8, 2026 | Activate AWS DevOps Agent from the AWS Support Plans console | AWS Business Support and higher customers can activate AWS DevOps Agent directly from the AWS Support Plans console while managing their subscription and take advantage of a monthly allotment of AWS DevOps Agent usage credits. New activations include a 2-month free credit period. |
| June 4, 2026 | Inline charts and data tables in chat | The agent renders charts and data tables directly in the conversation, so you get at-a-glance results without opening an external dashboard. |
| June 3, 2026 | Voice input in chat | Talk to the agent in chat using your microphone. Your speech is transcribed in real time. |
| June 3, 2026 | Export investigations and chat content as Markdown | Copy or download investigations, root causes, recommendations, and artifacts as Markdown, with incident links preserved, to paste into tickets and documents. |
| June 3, 2026 | Private DNS resolution and per-endpoint private connections | Choose how a private connection's host address is resolved when you create it: use public DNS, or in-VPC resolution for hostnames that exist only in a private hosted zone. For OAuth-based MCP servers, you can now route the endpoint (target URL) and the OAuth token exchange endpoint through separate private connections using targetUrlPrivateConnectionName and exchangeUrlPrivateConnectionName. |
| June 3, 2026 | Tools added during a chat are available without restarting | The agent now detects new tool connections during an active conversation and makes them available within about 30 seconds. You no longer need to start a new chat after connecting a tool or integration. |
| June 1, 2026 | Safety-check results in the investigation timeline | Tool-call cards now show safety-check results inline, so you can see exactly what the agent verified before it acted. |
| June 1, 2026 | Athena fallback for very large log files | When an Amazon CloudWatch Logs Insights query times out, the agent now queries Amazon S3 logs larger than 1 GB through Amazon Athena, so investigations on very large logs no longer fail silently. |
| May 28, 2026 | Chat sessions recover after a guardrail false positive | The agent now evaluates each message independently. One flagged message no longer blocks the rest of the conversation. |
| May 28, 2026 | CloudWatch Logs queries use the correct dates | The agent now uses a dedicated tool to calculate timestamps for Amazon CloudWatch Logs queries. Queries return results for the time range you request in both chat and investigations. |
| May 28, 2026 | Correct local times in chat conversations | Time zone conversions now handle UTC offsets and day boundaries correctly. |
| May 28, 2026 | How memory is built and refreshed | For active agent spaces, topology understanding now refreshes automatically. The agent works with current infrastructure context without manual updates. |
| May 27, 2026 | ClickHouse queries through the Grafana integration | If you use Grafana with ClickHouse data sources, the agent can query your ClickHouse-backed dashboards directly during investigations, so you can troubleshoot issues using ClickHouse observability data. |
| May 27, 2026 | Chat returns accurate agent space configuration details | When you ask the agent about your space configuration, it now returns accurate resource identifiers including the correct agent space ARN, so you can reference the exact resources in IAM policies and automation. |
| May 27, 2026 | Agent stops repeating the same failing action | The agent now detects repeated identical tool calls and breaks the loop to try a different approach. |
| May 23, 2026 | CloudTrail events for Asset API operations | Asset API operations now emit AWS CloudTrail events, so you can audit who changed skills, instructions, and memories in your agent space. |
| May 22, 2026 | Investigation deep links land directly on the investigation | Notification links from your chat and ticketing integrations take you straight to the investigation, with the destination preserved through AWS Console sign-in. Links are included as soon as an investigation enters progress, so you can follow along in real time. |
| May 22, 2026 | Steer agent behavior with AGENTS.md instructions | Write scoped instructions, per agent or shared, that shape agent behavior. Instructions are injected into the agent system prompt. |
| May 21, 2026 | Skip investigations with skip skills | Create skip skills so the agent ignores certain investigations. Skipped incidents remain visible, can be unskipped with feedback, and emit Amazon EventBridge notifications. |
| May 21, 2026 | Faster, more accurate topology generation for large agent spaces | Agent space understanding now generates faster and with greater accuracy for very large topologies. |
| May 20, 2026 | Context usage indicator in chat | Chat now shows how much of the context budget you have consumed in a conversation. |
| May 20, 2026 | Lower chat latency with parallel tool delegation | The chat agent can delegate to multiple specialist tools in parallel, reducing response latency. |
| May 20, 2026 | SigV4 authentication with service roles for MCP and read-write GitHub | Use AWS Signature Version 4 authentication with a service role for MCP servers and connect read-write GitHub integrations, so you can delegate access without managing long-lived credentials. |
| May 19, 2026 | Connect up to 500 MCP tools per agent space | The external MCP tool limit increased from 40 to 500 tools per agent space, so you can integrate more databases, APIs, and custom tools without hitting service limits. |
| May 19, 2026 | Recommendations ranked by priority and downloadable as reports | The agent ranks improvement recommendations by severity, exposure, compliance, and urgency, so you see a prioritized backlog instead of creation order. You can download recommendations as reports. |
| May 15, 2026 | Upload files and images in chat | Attach files and images in chat, and the agent reasons over the uploaded content. |
| May 13, 2026 | Disambiguation cards in chat | When the agent needs clarification, it now presents clickable options instead of asking open-ended questions, reducing back-and-forth. |
| May 13, 2026 | Chat conversations retain full context | The agent proactively summarizes long conversations to stay within context limits, so chats no longer lose earlier context as they grow. |
| May 11, 2026 | Auto-growing chat input | The chat input area now grows automatically as you type longer messages. |
| May 11, 2026 | Trigger investigations through a webhook with HMAC authentication | Trigger agent investigations programmatically from external systems such as PagerDuty or custom alerting with HMAC signature verification, so you can initiate investigations from any monitoring tool. |
| May 11, 2026 | Scope agent permissions and allowlist published static IP ranges | New guidance for scoping agent IAM permissions and published static IP ranges for all Regions, so you can apply least privilege access and configure firewall rules for agent traffic. |
| May 5, 2026 | Edit credentials for registered services | Update credentials for an already-registered service, such as GitLab, MCP servers, OAuth, or SigV4, without deleting and re-creating the association. This enables credential rotation without downtime. |
