Aiden use-case catalog

Maps customer situations to Terraform modules in this library. Each row links to the module README for variables, outputs, and wiring. For interactive discovery, tag filters, and copy-paste snippets, use the Module Catalog.

Deployment profiles (tags in the catalog): saas (single-tenant cloud SaaS), multitenant (tenant-scoped RCA), privatesaas (customer VPC / on-prem control plane), selfhosted (customer-owned AWS with CloudFormation). Many agents also expose optional sg_webhook ingress and remote-runner (aiden-runner) for shell-heavy paths.

By customer situation

Customer situation	Primary agent module	Typical integrations	Profile / pattern
GitHub docs/runbooks as agent knowledge: point a Knowledge Base at a repo, directory, or file → eligible files sync as Knowledge Documents or Runbook SOPs (incremental re-sync by blob SHA, private repos via the GitHub integration PAT)	`github-knowledge-source`	GitHub	`github`, `knowledge-base`, `runbooks`
Single-tenant Azure SaaS: PagerDuty pages → investigate in Datadog + Azure → match Confluence runbook → remediate via Azure Automation	`aios-agent-azure-saas-sre`	Datadog, PagerDuty, Confluence, Azure	`saas`, `webhook`, `remediation`
ServiceNow tickets: ingest change/incident → Grafana/Prometheus + AWS investigation → bounded AWS fix → Slack notify	`aios-agent-sre-ticket-resolution`	ServiceNow, Grafana, AWS, Slack	`webhook`, `tickets`, `remediation`
Multi-tenant SaaS: Datadog alert per tenant → cross-signal RCA (Datadog, GCP Logging, AWS ECS/CloudTrail, GitHub) → Slack publish + thread collaboration	`aios-agent-multitenant-sre-rca`	Datadog, GCP, AWS, GitHub, Slack	`multitenant`, `saas`, `webhook`, `rca`
PrivateSaaS ops: Grafana alert → AWS + PAN-OS investigation → bounded AWS remediation + connectivity audit	`aios-agent-privatesaas-devops-sre`	Grafana, AWS, Palo Alto	`privatesaas`, `webhook`, `remediation`
PrivateSaaS SRE (Aiden for SRE): FireHydrant + Grafana ingest → GCP + internal console → multi-source runbooks → RCA (document-only prod recommendations)	`aios-agent-privatesaas-sre`	FireHydrant, Grafana, GCP, internal REST API	`privatesaas`, `webhook`, `rca`, Bifrost LLM
PrivateSaaS GitOps: Slack `/aiden` for npm/deploy/pipeline failures → GitLab, Argo CD, DynamoDB, SonarQube → optional Ubuntu CLI / remote runner	`aios-agent-privatesaas-gitops-sre`	GitLab, Argo CD, SonarQube, AWS, Slack, Ubuntu (optional)	`privatesaas`, `gitops`, `webhook`, `remote-runner`
Self-hosted private AWS: CloudFormation stack failure ingest → read-only AWS/CFN investigation → HITL change-set recommendations, drift audit, pre-deploy review	`aios-agent-selfhosted-infra`	AWS, Ubuntu CLI (optional), remote runner (optional)	`selfhosted`, `infra`, `webhook`, `remote-runner`
Developer intent → company-standard CloudFormation (catalog reuse) → GitHub PR → change-set preview; Bedrock Sonnet 4.6 only	`aios-agent-cfn-author`	AWS, GitHub, Ubuntu CLI, `aios-foundation-bedrock`	`cloudformation`, `bedrock`, `iac`, `selfhosted`
Periodic / on-demand CloudFormation drift: parallel detect, FIX_DRIFT (risk) vs INCORPORATE_VIA_PR (reconcile PR)	`aios-agent-cfn-author`	AWS, GitHub, optional `aios-agent-schedules` cron	`cloudformation`, `drift`, `bedrock`, `selfhosted`
Application monolith → microservices: boundary scan + CCE (Go/Java/JS/TS), DDD guidance PR, optional `services/<name>/` scaffold + extract PR; optional aiden-runner for large repos	`aios-agent-monorepo-services-splitter`	GitHub, Ubuntu CLI, optional remote runner	`github`, `ubuntu`, `monorepo`, `microservices`, `ddd`, `cce`, `cce-enterprise`
Push to main should bootstrap CI/CD automatically based on the service stack	`aios-agent-cicd-yaml-generator`	GitHub	`github`, `webhook`, `cicd`, `pull-request`
CDK teams use raw AWS constructs instead of company golden constructs	`aios-agent-cdk-golden-construct-adoption`	GitHub	`github`, `cdk`, `golden-path`, `pull-request`
Terraform/OpenTofu monolith state → logical groups + optional per-group roots / AppStacks; optional CCE on app repo	`aios-agent-db-state-splitter`	GitHub, Ubuntu CLI, StackGen MCP (optional)	`terraform`, `iac`, `github`, `ubuntu`, `cce`, `modernization`
PR adds new cloud API calls → CCE entitlement delta comment before merge (`pre-deploy-iam-review`)	`aios-agent-terraform-bot`	GitHub, Ubuntu CLI	`cce`, `iam-gate`, `pre-deploy-iam`, `cce-enterprise`
Grafana alert storm → CCE incident-scoping on service repos → scoped RCA (not whole org)	`aios-agent-alert-triage`	Grafana, GitHub, Ubuntu, Slack	`sre`, `cce`, `incident-scope`, `cce-enterprise`
Knowledge-Guided SRE: Aiden Knowledge provides Environment Context and troubleshooting guidance → Grafana validates with Evidence → optional remote-runner kubectl adds cluster Evidence	`aios-agent-knowledge-guided-sre`	Aiden Knowledge, Grafana, remote runner	`sre`, `observability`, `knowledge`, `remote-runner`
Agentic / NLQ wrong answers: Langfuse + SigNoz → classify `code` vs `prompt` vs `domain_rules` → Slack RCA; optional domain-rules knowledge + pull-based `shared:accuracy-debug` memory	`aios-agent-accuracy-rca` (+ scenario `accuracy-rca`)	Langfuse, SigNoz, Slack, Bedrock; optional GitHub knowledge	`saas`, `webhook`, `rca`, `langfuse`, `accuracy`
Weekly SLO error budget + config drift digest from Git OpenSLO + Grafana	`aios-agent-slo-health`	GitHub, Grafana, Slack	`observability`, `slo`, `openslo`, `schedule`
Discover SLOs from Grafana dashboards → OpenSLO YAML → GitHub PR	`aios-agent-slo-health`	GitHub, Grafana, Ubuntu CLI	`observability`, `slo`, `openslo`, `webhook`
Reconcile OpenSLO Git drift with Grafana alert rules via PR	`aios-agent-slo-health`	GitHub, Grafana, Ubuntu CLI	`observability`, `slo`, `drift`, `webhook`
Quarterly multi-repo CCE audit evidence (PCI/HIPAA/SOC touchpoints)	`aios-agent-compliance-auditor`	GitHub, Ubuntu, AWS	`compliance`, `cce`, `compliance-evidence`, `cce-enterprise`
GitOps deploy failure → CCE code scope → scoped Argo CD rollback (not cluster-wide)	`aios-agent-privatesaas-gitops-sre`	GitLab, Argo CD, SonarQube, AWS, Slack, Ubuntu	`gitops`, `cce`, `gitops-scope`, `cce-enterprise`
Azure InfraOps / IfC: IDE MCP + GitHub repo → Azure-shaped IaC; optional Azure SaaS SRE (Acme greenfield Azure)	`azure-infraops`	GitHub, Azure, StackGen MCP; optional Datadog/PagerDuty	`azure`, `ifc`, `infraops`, `repo-to-iac`
npm/Dependabot noise → CCE CVE reachability → fix PRs for reachable only	`aios-agent-supply-chain-security`	GitHub, Ubuntu	`security`, `cce`, `cve-reachability`, `cce-enterprise`
Platform NL infra request → CCE entitlement guard on app repos → PoLP-sized IAM	`examples/agentic-infrastructure` + `aios-agent-repo-to-iac`	AWS, GitHub, StackGen MCP	`platform`, `cce`, `entitlement-guard`, `cce-enterprise`

CCE × Aiden OS enterprise workflows

Full index with demo scenarios: CCE enterprise workflows.

Monolith → microservices (application + IaC)

For customers splitting both application code and infrastructure state:

Monorepo services split — monorepo-services-split-analysis then monorepo-services-split-extract on the application repo.
DB state split — group Terraform/OpenTofu state and optional AppStack materialization.

Demo scenario: make demo SCENARIO=monorepo-services-split. Pair with db-state-splitter for full-stack modernization (make demo on both roots or compose in examples/complete).

Flagship CCE demo — three-tier pipeline documented in monorepo-services-splitter and CCE enterprise workflows.

CloudFormation Author (Bedrock)

Intent → catalog-aligned CloudFormation → GitHub PR → change-set preview; optional FedRAMP/baseline compliance gate and drift reconcile PRs. Full trigger examples (chat, webhooks, schedule): CloudFormation Author.

Demo: make demo SCENARIO=cfn-author. Sample webhook payloads: docs/samples/cfn-intent-webhook.json, cfn-compliance-webhook.json, cfn-drift-webhook.json.

Integration modules (wire standalone or via agents)

Tool	Module	Used by (examples)
Datadog	`aios-integration-datadog`	Azure SaaS SRE, multi-tenant RCA
PagerDuty	`aios-integration-pagerduty`	Azure SaaS SRE
FireHydrant	`aios-integration-firehydrant`	PrivateSaaS SRE
ServiceNow	`aios-integration-servicenow`	SRE ticket resolution
Confluence	`aios-integration-confluence`	Azure SaaS SRE (runbooks)
Palo Alto PAN-OS	`aios-integration-paloalto`	PrivateSaaS DevOps/SRE
Internal operator console (REST)	`aios-integration-internal-tool`	PrivateSaaS SRE
GitLab	`aios-integration-gitlab`	PrivateSaaS GitOps SRE
Argo CD	`aios-integration-argocd`	PrivateSaaS GitOps SRE
SonarQube	`aios-integration-sonarqube`	PrivateSaaS GitOps SRE

Bedrock LLM (AWS-native Claude)

aios-foundation-bedrock registers an Aiden OS Bedrock model provider and Claude Sonnet 4.6 via cross-region inference profile (us.anthropic.claude-sonnet-4-6 style). Use when agents should call Anthropic through AWS Bedrock (IAM role or static keys) instead of direct API keys from aios-foundation.

module "foundation_bedrock" {
  source = "github.com/appcd-dev/solutions//modules/aios-foundation-bedrock?ref=main"

  stackgen_url   = var.stackgen_url
  stackgen_token = var.stackgen_token
  aws_region     = "us-east-1"
  bedrock_auth   = { use_iam_role = true }
}

module "aws_sre" {
  source = "github.com/appcd-dev/solutions//modules/aios-agent-aws-sre?ref=main"

  model_names = module.foundation_bedrock.model_names
  # ...
}

Demo scenario: examples/scenarios/bedrock-sonnet-demo/.

Bifrost LLM (PrivateSaaS SRE)

aios-agent-privatesaas-sre is designed for customers who route all model traffic through an OpenAI-compatible Bifrost gateway instead of public LLM APIs. In the consumer root, register Bifrost as an sg_llm_provider + sg_llm_model, then pass those model names via model_names / bifrost_model_names. See the module README for a full example block.

Doc	Purpose
Module Catalog	Filter by tag (`aiden`, `use-case`, `webhook`, deployment profile, tool name)
Architecture	Layer diagram including new SRE / integration modules
SE Playbook	Runnable `examples/scenarios/` demos for pre-sales (not every use-case row has a scenario yet)
Monorepo services split	Analysis → guidance PR → extract workflow guide
CCE × AIOS integration map	Which agent modules run which CCE usage guides
CCE enterprise workflows	Seven enterprise superpowers with demo scenarios