Adding AgentCore Observability - Advanced Concepts

01-tutorials/06-AgentCore-observability/00-enable-transaction-search-template/transaction_search.yml

@@ -0,0 +1,31 @@
+Resources:
+  LogsResourcePolicy:
+    Type: AWS::Logs::ResourcePolicy
+    Properties:
+      PolicyName: TransactionSearchAccess
+      PolicyDocument: !Sub >
+        {
+          "Version": "2012-10-17",		 	 	 
+          "Statement": [
+            {
+              "Sid": "TransactionSearchXRayAccess",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "xray.amazonaws.com"
+              },
+              "Action": "logs:PutLogEvents",
+              "Resource": [
+                "arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:aws/spans:*",
+                "arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/application-signals/data:*"
+              ],
+              "Condition": {
+                "ArnLike": {
+                  "aws:SourceArn": "arn:${AWS::Partition}:xray:${AWS::Region}:${AWS::AccountId}:*"
+                },
+                "StringEquals": {
+                  "aws:SourceAccount": "${AWS::AccountId}"
+                }
+              }
+            }
+          ]
+        }

01-tutorials/06-AgentCore-observability/00-enable-transaction-search-template/transaction_search_config.yml

@@ -0,0 +1,5 @@
+Resources:
+  XRayTransactionSearchConfig:
+    Type: AWS::XRay::TransactionSearchConfig
+    Properties:
+      IndexingPercentage: 50

01-tutorials/06-AgentCore-observability/03-advanced-concepts/02-data-protection/data/customer_support_conversation_sample.txt

@@ -0,0 +1,15 @@
+Jane Doe: Hello, thank you for calling technical support. My name is Jane and I will be your technical support representative. Can I have your account number, please?
+Nikki Wolf: Yes, my account number is 13719713158835300.
+Jane Doe: Thank you. I see that you have locked your account due to multiple failed attempts to enter your password. To reset your password, I will need to ask you a few security questions. What is your phone number associated with the account?
+Nikki Wolf: 301-555-0188?
+Jane Doe: What is your address?
+Nikki Wolf: 123 Any Street, Any Town, USA.
+Jane Doe: Please confirm your email address.
+Nikki Wolf: my email is [email protected].
+Jane Doe: What is your social security number?
+Nikki Wolf: My ssn is 172-32-1176.
+Jane Doe: Great, thank you. I will now reset your password and send you an email with instructions on how to log in to your account. Please check your email in a few minutes.
+Nikki Wolf: Thank you so much for your help.
+Jane Doe: You're welcome. Is there anything else I can assist you with today?
+Nikki Wolf: No, that's all for now. Thank you again for your help.
+Jane Doe: You're welcome. Have a great day!

01-tutorials/06-AgentCore-observability/03-advanced-concepts/02-data-protection/requirements.txt

@@ -0,0 +1,7 @@
+aws-opentelemetry-distro~=0.12.1
+python-dotenv
+strands-agents[otel]
+ddgs
+boto3
+botocore
+json

01-tutorials/06-AgentCore-observability/03-advanced-concepts/README.md

@@ -7,6 +7,12 @@ This folder contains advanced observability concepts and techniques for Amazon B
 ### 01-custom-span-creation/
 Learn how to create custom spans for enhanced tracing and monitoring of your agent workflows.
 
+### 02-enable-transaction-search/
+Learn how to enable transaction search using CLI and CloudFormation
+
+### 03-data-protection/
+Learn how detect and protect sensitive information using CloudWatch Logs data protection policies and Bedrock Guardrails for Agents built on AgentCore
+
 
 ## 🚀 Getting Started
 

01-tutorials/06-AgentCore-observability/README.md

@@ -6,6 +6,11 @@ This repository demonstrates how to implement AgentCore observability for Agents
 
 ```
 06-AgentCore-observability/
+├── 00-enable-transaction-search-template/
+│   ├── images/
+│   ├── enable_transaction_search.ipynb
+│   ├── transaction_search_config.yml
+│   ├── transaction_search.yml
 ├── 01-Agentcore-runtime-hosted/
 │   ├── images/
 │   ├── .env.example
@@ -31,6 +36,11 @@ This repository demonstrates how to implement AgentCore observability for Agents
 │       ├── .env.example
 │       ├── Custom_Span_Creation.ipynb
 │       └── requirements.txt
+│   └── 02-data-protection /
+│       ├── data/
+│       ├── images/
+│       ├── data_protection.ipynb
+│       └── requirements.txt
 ├── README.md
 └── utils.py
 ```
@@ -41,6 +51,9 @@ This repository provides examples and tools to help developers implement observa
 
 ## Contents
 
+### 0. enable-transaction-search-template
+Learn how to enable transaction search using CLI and CloudFormation. This is a prerequisite for rest of the modules. 
+
 ### 1. Bedrock AgentCore Runtime Hosted (01-Agentcore-runtime-hosted)
 
 Examples demonstrating observability for Strands Agent hosted on Amazon Bedrock AgentCore Runtime using Amazon OpenTelemetry Python Instrumentation and Amazon CloudWatch.
@@ -58,6 +71,7 @@ Examples showcasing observability for popular open-source agent frameworks not h
 Advanced observability patterns and techniques:
 
 - **Custom Span Creation**: Learn how to create custom spans for detailed tracing and monitoring of specific operations within your agent workflows
+- **data protection**: Learn how detect and protect sensitive information using CloudWatch Logs data protection policies and Bedrock Guardrails for Agents built on AgentCore
 
 ## Getting Started
 

CONTRIBUTORS.md

@@ -39,4 +39,4 @@
 - Evandro Franco
 - greg-aws
 - Frank Dallezotte
-
+- sasikiran-malladi