Building an AWS DevOps Agent That Diagnoses but Never Deploys

Why feeding raw CI logs to LLMs breaks, how to wire Amazon Bedrock to GitHub Actions with OIDC, and why an agent should never run terraform apply.