What changed
AWS launched the Well-Architected Agent in public preview. It can inspect configurations, utilization and application topology across more than 65 AWS services, prioritize cost, security, performance and resilience findings, analyze uploaded Terraform, CloudFormation or CDK projects, and produce console, CLI or infrastructure-as-code remediation steps.
Why it matters
Architecture review is moving from a questionnaire toward a continuously scoped agent with read access to cloud estates and code. That can surface cross-service trade-offs faster, but a plausible recommendation can still be incomplete, over-permissioned or unsafe to apply.
What to do
Create a read-only agent profile for one non-production account and one pillar. Compare its findings with Cost Explorer, Security Hub and a human review, reject one recommendation deliberately, and require pull-request review plus rollback for every proposed IaC change.
Caveat
This is a public preview delivered through AWS Support in three US regions. AWS explicitly warns that generated recommendations can be wrong or incomplete; customers remain responsible for validation, IAM scope and remediation oversight.