IncidentScribe
Alert in → on-call summary out. Runbook-grounded, PII-redacted, cost-capped AI on Amazon Bedrock.
Live demo with synthetic incidents. Every request is redacted before it reaches the model, checked by a
Bedrock Guardrail, and counted against a hard daily budget. When the budget is used up you still get a deterministic
(non-AI) summary. Source: github.com/ObaidAbdullah16/incidentscribe-ai
1. Pick an incident
JSON with title, service, severity, description (max 8 KB). Try adding an email or an "ignore previous instructions" line.
2. Summary
Run an incident to see the summary here.
How it works
- CloudWatch alarm / Alertmanager webhook / API call → one normalised incident.
- Regex redaction of emails, phones, IPs, cards, Aadhaar numbers, AWS keys, tokens and passwords.
- BM25 retrieval of the 3 most relevant runbooks (12 runbooks, $0, deterministic).
- Budget check in DynamoDB (daily and monthly caps) → Bedrock Converse (Nova Micro) with a Guardrail.
- Strict JSON validation; anything invalid falls back to a deterministic summary. Result to Slack + DynamoDB.