Detailed analysis of an agentic AI system developed for automated security incident reporting
During security incidents, the response team faced challenges with manual stakeholder reporting, leading to delays and customer uncertainty. There was a need to automate communication and provide proactive, data-driven remediation steps.
As the Product Lead for the hackathon, I identified the core user problem of inefficient incident communication. I defined the product vision, authored the PRD outlining the agentic AI solution, and led the team through the development sprint. My role was to ensure our POC was not just technically impressive but also solved a critical business need, which I then presented to leadership to showcase its value.
I architected a real-time, event-driven framework that listens to incident updates from a DynamoDB stream. An AWS Lambda function triggers a SageMaker endpoint which uses a fine-tuned model and AWS Bedrock (Claude) to analyze the incident data. The system then automatically generates clear, concise stakeholder reports and suggests proactive remediation steps.
AWS Bedrock (Claude), AWS SageMaker, AWS Lambda, DynamoDB Streams, Python.