AWS Agents For Devsecops
Skill 8 of 130
Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile.
4 minutes · 881 words · 21 sections
Install
npx skills add aws/agent-toolkit-for-aws --skill running-release-testsnpx skills add aws/agent-toolkit-for-aws/plugin marketplace add aws/agent-toolkit-for-awsThe first command installs just this skill, by the name in its SKILL.md; the second installs the whole repository.
AgentSpace routing (SigV4 only): If
list_agent_spacesis available in your tool list and the multi-space orchestration skill has NOT been invoked yet this session, invoke it first to determine whichagent_space_idto use. Then passagent_space_idon all tool calls below. For bearer token auth this is unnecessary — the token is already scoped to one space.
Run automated release testing in the cloud via the AWS DevOps Agent’s Release Testing Agent. Supports UI testing (browser-based) and API testing (OpenAPI spec-based). Uses pre-existing test profiles that define target URL, agent type, personas, and credentials.
Input is a test profile — the test profile already contains the target URL, agent type (UI or API), test personas, and credentials. Do NOT ask the user for a URL directly; the URL is defined in the test profile.
ki-12345) created from the AWS DevOps Agent consoleBefore starting any workflow, you MUST gather the following parameters. Do NOT proceed to job creation until answered.
Ask the user which test profile to use. The test profile already contains the target URL, agent type (UI or API), test personas, and credentials configuration — these do NOT need to be gathered separately.
Note: A pre-existing test profile is a prerequisite. Test profiles are created using the AWS DevOps Agent console or API, not through this tool. If the user asks whether one can be created here, inform them it must already exist.
If the user has not already mentioned a test focus, ask:
“Do you have a specific test requirement or focus area? If not, I’ll run a full exploratory test.”
Wait for the user’s response. If they provide one, use it as the test_requirement. If they say no or skip, proceed without it.
IMPORTANT: You MUST wait for the user to respond before proceeding to job creation.
List available agent spaces:
aws devops-agent list-agent-spaces --region us-east-1Present the list to the user and ask which agent space they’d like to use. Do NOT proceed until the user has selected one. Use the selected agentSpaceId as SPACE_ID in all subsequent calls.
Verify that the following tools are available: aws_devops_agent__create_release_testing_job, aws_devops_agent__get_task, aws_devops_agent__list_journal_records, aws_devops_agent__get_release_ui_testing_report, aws_devops_agent__get_release_api_testing_report. These tools are NOT deferred/lazy-loaded — if they do not appear in your tool list, they are unavailable. Do NOT search for them via ToolSearch. If any are missing, skip the remaining steps in this section and use the “Fallback (aws-mcp)” path below instead.
aws_devops_agent__create_release_testing_job(
test_profile_id="ki-12345",
webhook_event_message="<optional test requirement>"
)
→ {"taskId": "...", "executionId": "...", "status": "started"}Record the taskId and executionId from the response.
Call aws_devops_agent__get_task(task_id=TASK_ID) every 30 seconds until the status transitions to IN_PROGRESS or a terminal state.
Once IN_PROGRESS, poll for progress in a loop:
aws_devops_agent__list_journal_records(execution_id=EXEC_ID, order="ASC") to fetch new findings.next_token from the response to fetch only new records on subsequent polls.aws_devops_agent__get_task(task_id=TASK_ID) periodically — stop when terminal status (COMPLETED, FAILED, CANCELED, TIMED_OUT).Once the job reaches a terminal status:
COMPLETED:
Determine the report type from the test profile’s agent type (UI or API). Call aws_devops_agent__get_release_ui_testing_report(execution_id=EXEC_ID) for UI profiles or aws_devops_agent__get_release_api_testing_report(execution_id=EXEC_ID) for API profiles.
Write the report contents to a markdown file:
release-testing-report-<YYYY-MM-DD-HHmmss>.mdInform the user that the report was saved, including the file path.
FAILED or TIMED_OUT: Present the error information and suggest next steps.CANCELED: Inform the user the job was canceled and no report is available.aws_devops_agent__cancel_release_testing_job(task_id=TASK_ID)FAILED, stop the workflow and report the error.IN_PROGRESS within 5 minutes, cancel it using cancel_release_testing_job.429 or ThrottlingException), wait 30 seconds before retrying. After 3 retries, inform the user.If the aws-devops-agent remote server is unavailable, use the AWS CLI directly:
Tell the user: “Remote server unavailable — using direct AWS API fallback.”
List available agent spaces:
aws devops-agent list-agent-spaces --region us-east-1Present the list to the user and ask which agent space they’d like to use. Do NOT proceed until the user has selected one. Use the selected agentSpaceId as SPACE_ID in all subsequent calls.
aws devops-agent create-backlog-task \
--agent-space-id SPACE_ID \
--task-type RELEASE_TESTING \
--title 'Release Testing' \
--priority MEDIUM \
--description '{\"testProfileId\": \"<PROFILE_ID>\", \"webhookEventMessage\": \"<REQUIREMENT>\"}' \
--region us-east-1If the user provided a test requirement, include it as webhookEventMessage. If not, omit the field or leave it empty.
aws devops-agent get-backlog-task \
--agent-space-id SPACE_ID \
--task-id TASK_ID \
--region us-east-1Poll every 30 seconds until the status transitions to IN_PROGRESS or a terminal state (COMPLETED, FAILED, CANCELED, TIMED_OUT).
Once IN_PROGRESS, poll for progress in a loop:
aws devops-agent list-journal-records \
--agent-space-id SPACE_ID \
--execution-id EXEC_ID \
--order ASC \
--region us-east-1next_token from the response to fetch only new records on subsequent polls.get-backlog-task periodically — stop when terminal status (COMPLETED, FAILED, CANCELED, TIMED_OUT).Once the job reaches a terminal status:
COMPLETED:
Retrieve the report using the appropriate record type:
--record-type qa_ui_testing_report--record-type qa_api_testing_reportaws devops-agent list-journal-records \
--agent-space-id SPACE_ID \
--execution-id EXEC_ID \
--record-type qa_ui_testing_report \
--order ASC \
--region us-east-1Write the report contents to a markdown file:
release-testing-report-<YYYY-MM-DD-HHmmss>.mdInform the user that the report was saved, including the file path.
FAILED or TIMED_OUT: Present the error information and suggest next steps.CANCELED: Inform the user the job was canceled and no report is available.aws devops-agent update-backlog-task \
--agent-space-id SPACE_ID \
--task-id TASK_ID \
--task-status CANCELED \
--region us-east-1Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for regressions, or test API endpoints. Trigger words include run tests, UAT, test my app, test profile, UI test, API test, automated testing, regression test, QA, end-to-end test, run the QA agent.
The verbatim description from this skill’s front matter — the string an agent matches on to decide whether to load it.
main, last pushed 24 September 2026.SKILL.md, not by matching a directory convention. 19 distinct layouts observed: plugins/aws-agents-for-devsecops/skills/*/SKILL.md, plugins/aws-agents/skills/*/SKILL.md, plugins/aws-core/skills/*/SKILL.md, skills/core-skills/*/SKILL.md, skills/specialized-skills/analytics-skills/*/SKILL.md, skills/specialized-skills/database-skills/*/SKILL.md, skills/specialized-skills/ec2-skills/*/SKILL.md, skills/specialized-skills/end-user-computing-skills/*/SKILL.md, skills/specialized-skills/messaging-and-streaming-skills/*/SKILL.md, skills/specialized-skills/migration-and-modernization-skills/*/SKILL.md, skills/specialized-skills/networking-and-content-delivery-skills/*/SKILL.md, skills/specialized-skills/operations-skills/*/SKILL.md, skills/specialized-skills/quantum-computing-skills/*/SKILL.md, skills/specialized-skills/resilience-skills/*/SKILL.md, skills/specialized-skills/security-and-identity-skills/*/SKILL.md, skills/specialized-skills/serverless-skills/*/SKILL.md, skills/specialized-skills/storage-skills/*/SKILL.md, skills/specialized-skills/system-table-skills/*/SKILL.md, skills/specialized-skills/web-and-mobile-development/*/SKILL.md.h1 and no skipped levels:.claude-plugin/marketplace.json by Amazon Web Services, declaring 4 plugins. It is read for editorial metadata only — never as the skill index, which is always the repository tree./aws/agent-toolkit-for-aws.md, and each skill at its own .md URL.