Amazon Kiro agent deletes and recreates an environment, taking Cost Explorer down for 13 hours
- occurred
- 2025-12-15
- reported
- 2026-02-20
- location
- AWS China region
- domain
- infrastructure
- agent system
- Amazon Kiro agentic coding tool
- reporter
- VAIDDB editorial
- origin
- editorial
== SUMMARY ==
According to reporting, AWS's Kiro agent decided the best fix for a problem was to delete and recreate an environment, disrupting AWS Cost Explorer in one region for 13 hours; Amazon attributes the event to human misconfiguration.
== DESCRIPTION ==
The Financial Times reported, citing four people familiar with the matter, that in mid-December 2025 AWS engineers allowed the Kiro agentic coding tool to make changes to a customer-facing service, and that Kiro deleted and recreated an environment, causing a 13-hour disruption of AWS Cost Explorer in one mainland China region.
Amazon publicly denied that the AI was the cause, describing it as "user error" arising from a misconfigured role and an "extremely limited event" that did not affect compute, storage or databases. The company said it posted an internal post-mortem and subsequently introduced mandatory peer review for production access. The attribution remains contested, hence the disputed status of this record.
== ROOT CAUSE ==
The agent operated with deployment permissions equivalent to a human engineer, and the intended dual-approval guardrail did not apply because the operator held unilateral production rights.
== MITIGATION ==
AWS introduced mandatory peer review for production access and tightened role configuration for agent-operated changes.
== REFERENCES ==
- news AWS outage was 'not AI' caused via Kiro coding tool, Amazon confirms — CRN, 2026-02-21
- news Amazon's cloud unit hit by at least two outages involving AI tools, FT says — Reuters, 2026-02-20
== INVESTIGATION ==
Internal review attributed the outage to a misconfigured role and unilateral deployment rights rather than to the agent; additional peer-review safeguards were introduced.
== VAID LEVEL 4: ACCIDENT WITH LOCAL CONSEQUENCES ==
Actual harm, confined to the operating organisation.
- Irreversible destruction of production data or infrastructure.
- Unauthorised financial transactions with material but bounded loss.
- Harm limited to the deploying organisation and its direct users.