Enterprise-Scale Cloud Event Management with Generative AI for Operational Intelligence

fidelity_investments · Finance · 2024 · source Agentic: yes · promotional bias: low · source-backed · extracted with prompt 0.5.6 (schema v2)

Generated from extraction.json — do not edit by hand. Every claim cites verbatim source evidence; stated means the quote directly asserts the claim, implied means it supports it indirectly.

Problem

Domain: Cloud operations event intelligence

Fidelity needed to aggregate, enrich, route, and act on cloud health events and support cases across a massive multi-cloud estate, then use generative AI to summarize trends, recommend remediation, and enable agentic operational workflows.

Constraints:

Architecture

Fidelity built CENTS, an event-driven Cloud Event Notification Transport Service, using AWS Health delegated administration, EventBridge, event enrichment, OpenSearch/search, routing, and contextual delivery. On top, AWS/Fidelity demonstrated MAKI, which sends AWS Health and Support data to Amazon Bedrock, uses on-demand or batch inference depending on volume, summarizes events, identifies categorical buckets and trends, embeds events in OpenSearch with Titan Embeddings, and exposes agent tools for querying health events and related support cases.

Diagram confidence: reconstructed (reconstructed from prose).

flowchart LR
  aws-health-delegated-admin["AWS Health delegated admin"] --> eventbridge["EventBridge"]
  eventbridge --> cents-enrichment-pipeline["CENTS enrichment pipeline"]
  cents-enrichment-pipeline --> opensearch-event-store["OpenSearch event store"]
  cents-enrichment-pipeline --> stakeholder-routing["Stakeholder routing"]
  opensearch-event-store --> maki-bedrock-analysis["MAKI Bedrock analysis"]
  maki-bedrock-analysis --> agent-tools["Agent tools"]
  agent-tools --> operational-guidance["Operational guidance"]
  maki-bedrock-analysis --> opensearch-event-store["OpenSearch event store"]
Drag to pan · scroll or use +/− to zoom · reconstructed from the source's described component topology

Components

Component Role Interacts with
AWS Health delegated admin Aggregates AWS Health events across Fidelity accounts. EventBridge
EventBridge Delivers health events to the event-driven pipeline. CENTS enrichment pipeline
CENTS enrichment pipeline Adds metadata, dependencies, and context to raw cloud events. OpenSearch event store, Stakeholder routing
OpenSearch event store Search/index layer for events, embeddings, and operational queries. MAKI Bedrock analysis
Stakeholder routing Routes enriched events to people and systems that need them. —
MAKI Bedrock analysis Uses Bedrock prompts, batch/on-demand inference, and embeddings to summarize trends and recommend actions. Agent tools, OpenSearch event store
Agent tools Query health events and relevant support cases through search/MCP-style tools. Operational guidance
Operational guidance Summaries, remediation suggestions, resilience plans, and related support-case context. —

Data flow

AWS Health events aggregate from delegated accounts into EventBridge, enter CENTS for enrichment with Fidelity metadata and dependencies, route to users and OpenSearch, then MAKI augments support/health data and calls Bedrock for categorization, summaries, plans, embeddings, and agentic retrieval of related support cases.

“single EventBridge role, aws.health in your organizational delegated administrative account aggregates 2,000 accounts worth of events”transcript, stated
“For support cases, we take every single support case and we augment it with reference data.”transcript, stated

Why this architecture

Fidelity moved to event-driven aggregation because the cloud estate made polling brittle and expensive; MAKI then layered Bedrock analysis on top of clean, enriched event/support data because operational insight depends on consistent data foundations.

“Rather than that pull antiquated pull mechanism wake up Chron-based type stuff”transcript, stated
“If you can't get that consistent and clean, none of these fancy tools that we have out here are gonna do anything for you.”transcript, stated

Models used: Amazon Bedrock · Amazon Titan Embeddings · Bedrock Converse API · OpenSearch · EventBridge · AWS Health · MAKI

Scale

Alternatives considered (roads not taken)

Poll for events on a schedule.

Rejected because: Polling became antiquated, costly, and poorly matched to real-time reaction at Fidelity's scale.

“We went from a time-based poll system to now essentially an event-driven system”transcript, stated

Route raw cloud events directly.

Rejected because: Fidelity engineers needed added metadata, dependencies, and context.

“this raw event is great, but a lot of our Fidelity and engineers need more. So we need context.”transcript, stated

Use on-demand Bedrock inference for all analysis.

Rejected because: Large annual analyses could hit token throttles and do not need immediate answers.

“you'll probably exhaust your token counts and you may get throttled.”transcript, stated

Analyze health events without support-case context.

Rejected because: Health events and support cases together give a worldview for actions and impact.

“We have health and support in one worldview”transcript, stated

Patterns

async-message-orchestration (orchestration)

CENTS uses event-driven routing over EventBridge rather than scheduled polling.

“now essentially an event-driven system that gets this in real time out to the users”transcript, stated

rag-retrieval (retrieval)

MAKI retrieves event and support-case context from OpenSearch before generating guidance.

“it's pulling support cases that's only relevant to that S3 health event.”transcript, stated

batch-offline-processing (optimization)

Large annual analyses are sent to Bedrock batch inference to avoid throttling and reduce cost.

“you can send it to batch, and Amazon bedrock batch inference”transcript, stated

tool-use-orchestration (orchestration)

The MAKI agent uses search tools over health events and support cases to answer operational questions.

“we have a bunch of tools for what support cases and health events.”transcript, stated

Tradeoffs

Move from polling to event-driven processing.

Chose EventBridge and delegated-account event aggregation. over Chron-based polling and pull workflows..

Rationale: Event-driven delivery fit real-time reaction needs and reduced cost.

“based on the amount of resources we had out there and the real time that we wanted our users to react”transcript, stated

Use both on-demand and batch Bedrock inference.

Chose On-demand for few streaming events, batch for large retrospective jobs. over One inference mode for all workloads..

Rationale: Urgency and volume differ by event stream versus annual analysis.

“if we have roughly few number events, we send the to Amazon bedrock on demand inference. And if we have a lot of events we send it to batch.”transcript, stated

Correlate support cases with health events.

Chose One worldview for health and support data. over Separate operational silos..

Rationale: Relevant support cases reveal existing actions for the same health event.

“support cases are often actions based on health events.”transcript, stated

Gotchas (what bit them)

Scale turns simple event collection into a data-foundation problem.

Root cause: Thousands of accounts and millions of resources generate large event volumes.

Resolution: Centralize event aggregation through delegated admin and EventBridge.

“now we have a scale problem.”transcript, stated

Raw events lack the context engineers need to act.

Root cause: AWS event payloads do not include Fidelity-specific metadata and dependencies.

Resolution: Add enrichment before routing events to users.

“providing the context is the most powerful part.”transcript, stated

Large GenAI analyses can hit token throttling.

Root cause: Annual retrospective analysis may involve tens of thousands of cases/events.

Resolution: Route large, non-urgent analyses to Bedrock batch inference.

“if you're doing annual analysis, you don't need that report right away.”transcript, stated

Evaluation

Fidelity measures the pipeline through cloud coverage, account/resource/event volume, cost reduction, real-time delivery, enriched context usefulness, support-case/event correlation, Bedrock summarization outputs, and batch/on-demand cost behavior.

Metrics: 80% apps in cloud · Almost 2,000 AWS accounts · Almost 5 million resources · Almost 150,000 AWS events in two years · 57% cost reduction · Tens of thousands of support cases for annual analysis

“So this simple operation gives us that next step in Jason's goal, we're able to identify similar event trends.”transcript, stated
“Amazon bedrock batch inference, it allows for no stress on your throttling and also it's far more cost effective.”transcript, stated

Outcomes

Fidelity's estate is multi-cloud, with most apps in the cloud and possible on-prem extension.

“we aggregate across multiple clouds and then we have an extension to that we're potentially gonna go on-prem with too”transcript, stated
“give you a suggestion how to address the health event and documentation as well.”transcript, stated