Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug", "alarm fired", "service down". Polls and streams progress, then surfaces recommendations.
Install
npx skills add aws/agent-toolkit-for-aws --skill investigating-incidents-with-aws-devops-agentnpx skills add aws/agent-toolkit-for-aws --skill investigating-incidents-with-aws-devops-agent -a claude-code -gnpx skills add aws/agent-toolkit-for-aws --skill investigating-incidents-with-aws-devops-agent -a codex -ggemini skills install https://github.com/aws/agent-toolkit-for-aws.git --path plugins/aws-agents-for-devsecops/skills/investigating-incidents-with-aws-devops-agentgh skill install aws/agent-toolkit-for-aws investigating-incidents-with-aws-devops-agentgit clone --depth 1 https://github.com/aws/agent-toolkit-for-aws /tmp/aws__agent-toolkit-for-aws
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/investigating-incidents-with-aws-devops-agent ~/.claude/skills/investigating-incidents-with-aws-devops-agent # Claude Code
cp -R /tmp/aws__agent-toolkit-for-aws/plugins/aws-agents-for-devsecops/skills/investigating-incidents-with-aws-devops-agent ~/.agents/skills/investigating-incidents-with-aws-devops-agent # Codex, Cursor, Gemini CLI, Copilot, OpenCode