Diagnostic reporter: permissions, evidence and deduplication

Diagnostic reporter: permissions, evidence and deduplication An architecture diagram generated by Archify. Alertmanager · JSON routing · Architecture component Alertmanager JSON routing CloudWatch · Alarms and events · Architecture component CloudWatch Alarms and events DynamoDB · Idempotency · 24h · Architecture component DynamoDB Idempotency · 24h Input SNS · Encrypted alerts · Architecture component Input SNS Encrypted alerts Failure queue · SNS / Lambda failures · Architecture component Failure queue SNS / Lambda failures Diagnostic reporter · Lambda · no remediation · Architecture component Diagnostic reporter Lambda · no remediation Output SNS · Encrypted results · Architecture component Output SNS Encrypted results Logs · CW Logs aggregate only · Architecture component Logs CW Logs aggregate only Metrics · CW SQS / RDS values · Architecture component Metrics CW SQS / RDS values Amazon Bedrock · Converse · maxTokens 1024 · Architecture component Amazon Bedrock Converse · maxTokens 1024 Responders · Human reviews hypothesis · Architecture component Responders Human reviews hypothesis toJson / SNS alarm action SNS event delivery failure deduplicate fixed query fixed resources evidence only publish result notify Legend Backend Database Cloud Message bus External

Evidence boundaries

  • • Read only configured CloudWatch metrics and log aggregates
  • • Do not invent absent AMP or X-Ray evidence