incident-response

Automate incident diagnosis and response from AWS CloudWatch alarms using Python.

Updated Jun 16, 2026
One-click install
npx skills add https://github.com/sori883/evo --skill incident-response-sori883
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/sori883/evo/tree/main/skills/incident/base/incident-response
Command: npx skills add https://github.com/sori883/evo --skill incident-response-sori883

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires boto3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the diagnosis and response to incidents triggered by AWS CloudWatch alarms, streamlining the process of identifying and addressing issues.

Core Features & Use Cases

  • Incident Diagnosis: Analyze CloudWatch alarms and related metrics to identify the root cause of incidents.
  • Response Decision: Determine whether an incident requires action based on diagnostic results.
  • Code Repair and PR Proposal: Generate code fixes and PR proposals for incidents that require action.
  • Use Case: Use this Skill to quickly diagnose and respond to incidents in your AWS environment, reducing downtime and improving efficiency.

Quick Start

Use the incident-response skill to diagnose and respond to a CloudWatch alarm triggered by a sudden drop in CPU usage.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate AWS CloudWatch alarm diagnosis and incident response?

Automating AWS CloudWatch alarm diagnosis involves analyzing triggered alarms and related metrics to identify root causes, determining if action is required, and generating code repair proposals to streamline incident handling workflows.

Can I generate code repair proposals automatically from AWS CloudWatch alarms?

Yes, you can generate code repair and pull request proposals automatically from AWS CloudWatch alarms by analyzing metrics and logs to diagnose the incident, then creating targeted code fixes for issues requiring action.

How does incident response coordinate metric analysis and log inspection for AWS?

Incident response coordinates metric analysis and log inspection by using the AWS SDK for Python to interact with AWS services, analyzing CloudWatch metrics and logs to pinpoint the root cause of triggered alarms.

Do I need boto3 to automate incident response with AWS CloudWatch?

Yes, you need the boto3 AWS SDK for Python to interact with AWS services, as it provides the required programmatic interface to access CloudWatch alarms, analyze metrics, and inspect logs for incident diagnosis.

What's the best way to handle a sudden CloudWatch CPU usage drop incident?

The best way to handle a sudden CloudWatch CPU usage drop is to use an automated incident response workflow that analyzes the alarm metrics, inspects associated logs, and proposes code repairs to reduce downtime.

Can incident response workflows determine if a CloudWatch alarm requires action?

Yes, incident response workflows can determine if a CloudWatch alarm requires action by evaluating diagnostic results from metric analysis and log inspection, ensuring only actionable incidents trigger code repair proposals.