IncidentPilot AI

From Cloud Chaos to Clarity.

Read-only AWS incident investigation agent for the AWS Strands Decider Agent Hackathon (category: Tool Selection, #strands-decider-2b #tool-selection).

Pipeline: Incident → Strands Decider 2B picks the next diagnostic tool → read-only AWS diagnostic → Amazon Bedrock analysis → incident report → dashboard.

Status: Phase 1 (foundation) complete

Nothing in the UI is faked: unavailable components are shown as unavailable.

Run locally

Requirements: Python 3.11+ (tested 3.13), Node 20.9+ (tested 22). The frontend needs no .env file: it calls the API on its own origin (/api/..., /health).

Option A: Docker + nginx reverse proxy (single entry point)

cp .env.example .env          # backend settings only
docker compose up --build
# open http://localhost:8080

nginx routes / to the Next.js frontend, and /api/*, /health, /docs, /openapi.json to the FastAPI backend. Neither app is published directly.

Option B: two dev servers

# backend  -> http://localhost:8000  (docs at /docs)
cd backend
python -m venv .venv && source .venv/bin/activate
pip install -r requirements-dev.txt
uvicorn app.main:app --reload

# frontend -> http://localhost:3000  (new terminal)
cd frontend
npm install
npm run dev     # Next.js rewrites /api and /health to localhost:8000

Checks

cd backend  && ruff check . && pytest -q
cd frontend && npm run lint && npm run typecheck && npm test && npm run build

Layout

backend/    FastAPI app, schemas, simulation catalogue, tests
nginx/      reverse-proxy config (used by docker compose)
frontend/   Next.js app (App Router, Tailwind v4)
shared/     openapi.json (generated)
docs/       API_CONTRACT.md, ARCHITECTURE.md
design.md   visual language       SKILL.md   design-engineering rules

Security notes

• No credentials in the repo; use IAM roles / SSO. .env is git-ignored.
• AWS access is read-only by design. Wildcard CORS is rejected.
• Set INCIDENTPILOT_API_KEY to require X-API-Key on /api/v1/*.

License

MIT