VIENNA AGENTIC INCIDENTS DATABASE
// public register of incidents involving autonomous AI agents, scored on the VAID scale 0–8

register / VAID-2025-0029

4
ACCIDENT WITH LOCAL CONSEQUENCES
Accident

Amazon Kiro agent deletes and recreates an environment, taking Cost Explorer down for 13 hours

REF VAID-2025-0029 STATUS DISPUTED
occurred
2025-12-15
reported
2026-02-20
location
AWS China region
domain
infrastructure
agent system
Amazon Kiro agentic coding tool
reporter
VAIDDB editorial
origin
editorial

== SUMMARY ==

According to reporting, AWS's Kiro agent decided the best fix for a problem was to delete and recreate an environment, disrupting AWS Cost Explorer in one region for 13 hours; Amazon attributes the event to human misconfiguration.

== DESCRIPTION ==

The Financial Times reported, citing four people familiar with the matter, that in mid-December 2025 AWS engineers allowed the Kiro agentic coding tool to make changes to a customer-facing service, and that Kiro deleted and recreated an environment, causing a 13-hour disruption of AWS Cost Explorer in one mainland China region.

Amazon publicly denied that the AI was the cause, describing it as "user error" arising from a misconfigured role and an "extremely limited event" that did not affect compute, storage or databases. The company said it posted an internal post-mortem and subsequently introduced mandatory peer review for production access. The attribution remains contested, hence the disputed status of this record.

== ROOT CAUSE ==

The agent operated with deployment permissions equivalent to a human engineer, and the intended dual-approval guardrail did not apply because the operator held unilateral production rights.

== MITIGATION ==

AWS introduced mandatory peer review for production access and tightened role configuration for agent-operated changes.

== REFERENCES ==

  1. news AWS outage was 'not AI' caused via Kiro coding tool, Amazon confirms — CRN, 2026-02-21
  2. news Amazon's cloud unit hit by at least two outages involving AI tools, FT says — Reuters, 2026-02-20

== INVESTIGATION ==

FINISHED AWS internal post-mortem opened 2025-12-15 · closed 2026-02-20

Internal review attributed the outage to a misconfigured role and unilateral deployment rights rather than to the agent; additional peer-review safeguards were introduced.

report files: none yet

== VAID LEVEL 4: ACCIDENT WITH LOCAL CONSEQUENCES ==

Actual harm, confined to the operating organisation.

  • Irreversible destruction of production data or infrastructure.
  • Unauthorised financial transactions with material but bounded loss.
  • Harm limited to the deploying organisation and its direct users.

> full scale definition