feat: add bedrock-adoption-readiness production assessment skill - #63
Open
SruVed wants to merge 2 commits into
Open
feat: add bedrock-adoption-readiness production assessment skill#63SruVed wants to merge 2 commits into
SruVed wants to merge 2 commits into
Conversation
pbraz-aws
reviewed
Aug 21, 2026
| | CW dimensions | `ModelId` | `Model`, `Project` | | ||
| | IAM prefix | `bedrock:`, `bedrock-runtime:` | `bedrock-mantle:` | | ||
| | Cost discriminator | No marker in USAGE_TYPE | `-mantle-` substring in USAGE_TYPE | | ||
| | Cross-region inference | Yes (`global.` prefix in ModelId) | No (in-region only) | |
There was a problem hiding this comment.
This is incomplete. Global cross-region inference is only one mechanism. You also have geographic cross region inference (example us. prefix)
pbraz-aws
reviewed
Aug 21, 2026
|
|
||
| ### 3.6 Guardrails | ||
|
|
||
| List Bedrock guardrails. Zero guardrails on a production deployment is a finding. |
There was a problem hiding this comment.
Bedrock Guardrails are not available on Mantle endpoints. If customers use bedrock-mantle, this would flag incorrectly
pbraz-aws
reviewed
Aug 21, 2026
| | LOW | Minor optimization | Address when convenient | | ||
| | INFO | Observation, no action required | N/A | | ||
|
|
||
| ## Phase 2 (Future) |
There was a problem hiding this comment.
Future work references should not be included
pbraz-aws
reviewed
Aug 21, 2026
|
|
||
| The DevOps Agent role needs read-only access. Most required actions are covered by `AIDevOpsAgentAccessPolicy` (v10+): | ||
|
|
||
| ```json |
There was a problem hiding this comment.
Link to the existing policy document in the documentation, not copy it here. This can change over time.
pbraz-aws
reviewed
Aug 21, 2026
| - Severity-rated findings (CRITICAL/HIGH/MEDIUM/LOW/INFO) | ||
| - Structured report output with priority matrix and verdict | ||
|
|
||
| ### Not included (Phase 2) |
pbraz-aws
reviewed
Aug 21, 2026
|
|
||
| **Phase 1 (this release):** D1 IAM, D2 ZDR, D3 Quota, D6 Observability - all API/metrics-driven, no dependency on customer configuration state. | ||
|
|
||
| **Phase 2 (future):** D4 Model Selection Fitness, D5 Cost Projection - require model invocation logging to be enabled. |
There was a problem hiding this comment.
Future work should not be referenced or included
pbraz-aws
reviewed
Aug 21, 2026
|
|
||
| ### 3.7 VPC Endpoints | ||
|
|
||
| Check for VPC endpoints matching `com.amazonaws.<region>.bedrock-runtime`. |
There was a problem hiding this comment.
pbraz-aws
suggested changes
Aug 21, 2026
- Add geographic cross-region inference prefixes (us., eu., ap.) alongside global. - Scope guardrails check to Standard Bedrock only (not available on Mantle) - List all 5 VPC endpoint service names per docs - Remove all Phase 2/future work references - Replace IAM policy JSON with link to managed policy doc - Add doc reference for VPC endpoints
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Phase 1 MVP skill covering four dimensions: IAM governance, data retention (ZDR), quota and capacity headroom, and operational observability. Operates across both Standard Bedrock and Mantle surfaces with
multi-region discovery.
Testing
Taskei
V2324033077 - accepted by Project Nebula team (reviewer: pbraz)
Checklist