AWS Well-Architected Agent: an AI that audits your cloud
AWS Well-Architected Agent reviews your cloud against best practice and writes the fixes. Here is how it works, and its real preview limits.
AWS Well-Architected Agent: an AI that audits your cloud
Architecture reviews are one of those things every team knows they should do regularly and almost nobody actually does. Correlating cost, security, performance, and resilience across dozens of services by hand takes real expertise and real hours, which is exactly why it keeps getting postponed. On October 1, 2026, AWS announced the public preview of AWS Well-Architected Agent, an AI service built to do that correlation automatically, and to hand back fixes instead of just a list of problems.
What It Actually Does
AWS describes Well-Architected Agent as the next-generation evolution of two existing tools: AWS Trusted Advisor and the AWS Well-Architected Tool. Neither of those tools is confirmed as being retired, so for now this sits alongside them rather than replacing them outright.
The agent analyzes your environment by correlating utilization metrics, resource configurations, and application topology against AWS's own Well-Architected best practices, spanning more than 65 AWS services. What sets it apart from a typical findings dashboard is that it reasons at three distinct levels: individual resources, whole applications, and overall architecture, so a recommendation can reflect how one misconfigured resource actually affects the bigger picture, not just flag it in isolation.
Goal-Aligned, Not Just a Checklist
A traditional advisor tool tends to return the same flat list of findings to everyone. Well-Architected Agent is built around what AWS calls goal-aligned intelligence: you define your actual business priorities (cost reduction, say, over raw performance), and recommendations get prioritized against those goals instead of a generic severity score. Clicking into any single recommendation shows the reasoning behind it, the trade-offs involved, and exactly which resources are affected, so you're not left guessing why the agent suggested it.
It Also Reads Your Infrastructure as Code
This is the part that makes it genuinely useful for teams already working with IaC. The agent can review Terraform, AWS CloudFormation, and AWS CDK templates directly, flag where they drift from Well-Architected best practices, and return the actual code changes needed to fix them, not just a text description of what's wrong. Where a fix applies to live infrastructure rather than a template, it can instead hand you an SSM runbook, a ready-to-run CLI script, or a guided console walkthrough, whichever fits the fix.
How You Actually Set It Up
Getting started means creating an agent profile that specifies which AWS accounts, regions, and applications you want monitored. From there, you provision customer-managed IAM roles that grant the agent read access to resource configurations, utilization metrics, and application topology. You're explicitly in control of what it can see, nothing is scanned by default without that IAM setup.
The Honest Limitations Right Now
This is a preview, not a finished product, and it's worth being upfront about what that means in practice:
- It's gated behind AWS Support. The agent is delivered through AWS Support and requires an active Support plan to access, so it isn't something every AWS account can try today, even in preview.
- Region availability is limited. The preview currently runs out of US East (N. Virginia), US East (Ohio), and US West (Oregon), though you can onboard workloads from any commercial AWS Region into it.
- No pricing has been announced. AWS hasn't published what this will cost once it moves beyond preview.
None of that takes away from what it's trying to do, but anyone expecting to spin this up on a personal or student account today is likely to hit the Support-plan wall immediately.
Why This Is Worth Watching
Architecture reviews are exactly the kind of expert, time-consuming work that's genuinely hard to scale with humans alone. If Well-Architected Agent delivers on prioritized, context-aware, implementation-ready fixes the way AWS describes, it closes a real gap between "here's what's wrong" and "here's exactly how to fix it," which is usually where these reviews stall out in practice. Worth keeping an eye on as it moves toward general availability.
References & Resources
Enjoyed reading this content? Let the author know!
Your likes, comments, shares, and saves help creators reach more builders.
Loading recommendations
Loading article