Announced October 1, 2026, the Well-Architected Agent analyzes live accounts and Terraform, CDK and CloudFormation against the Well-Architected pillars and proposes fixes, including runbooks and IaC changes. It needs an AWS Support plan. What it is good at, what it cannot know, and how we use it alongside a review.
AWS describes the Well-Architected Agent as the next evolution of Trusted Advisor and the Well-Architected Tool. It correlates metrics and application topology against Well-Architected best practices across cost, security, performance and reliability, prioritizes recommendations by the goals you set, and returns automation-ready fixes: Systems Manager runbooks for live resources and code changes for Terraform, CloudFormation and CDK. Access runs in three US Regions, workloads can be onboarded from any commercial Region, and it is delivered by AWS Support to customers with a Support plan.
Book a free 30-minute call. You'll leave knowing what we'd do first and roughly what it costs, whether or not you hire us.
Breadth: every resource in every onboarded workload, checked consistently.
Configuration gaps with clear fixes: missing Multi-AZ, unencrypted storage, over-permissive security groups, idle resources.
Cross-pillar effects: showing the cost and performance impact of a reliability fix before you apply it.
IaC review before deployment, which is where fixes are cheapest.
Which findings matter to your business this quarter, and which can wait.
Plans that are not in the account yet: the product launching in March, the enterprise customer asking for SOC 2, the acquisition.
Organizational causes: why the same misconfiguration keeps reappearing, who owns what, and which team is overloaded.
Architecture choices that are correct for you but unusual, which a best-practice check will flag anyway.
Once a month: what changed in tech that month and what it means for you, from cloud and AI to security and the tools you build with. Every item links to its source. No sales pitch, unsubscribe in one click.
Book a free 30-minute call about it. Bring your setup and your bill; you'll leave knowing what we'd do first and roughly what it costs, whether or not you hire us.
Or keep reading
Pulumi vs Terraform in 2026: Why We Pick Pulumi When It Isn't Only AWS (and CDK When It Is)
Our rule is short: CDK when everything is on AWS, Pulumi over Terraform when it isn't. Pulumi gives you real languages, real tests and an engine you can call from code, and it can use any Terraform or OpenTofu provider, so the ecosystem comes with it. What Pulumi costs, where Terraform is still the better call, and how to move.
Read
Amazon CloudWatch Omni: OpenTelemetry, Agent Observability and AI Investigations
CloudWatch Omni, generally available since September 23, 2026, reorganizes CloudWatch around teams and applications, adds a dedicated experience for observing AI agents, built on OpenTelemetry, and investigations in natural language. What it covers, where it runs, and how it changes the case for a third-party APM.
Read
As of October 25, 2026. Provided as is, for general information, and accurate to the best of our knowledge on the date shown. Not legal, compliance, tax, financial or other professional advice. Prices, limits and vendor services change; check current vendor documentation before relying on anything here. Terms of use.