Sherpa Agent: Talk to Your AWS Cloud

Talk to your AWS cloud. Most teams don't have a cost problem, a security problem, and an observability problem. They have a fragmentation problem. Sherpa closes that gap by putting cost, security, observability, and inventory on one grounded data layer, then letting you query it in plain language. Instead of switching between Cost Explorer, a CSPM tool, and a separate observability platform, you get a single conversational AI agent that already knows your environment.

At the core is the Sherpa Knowledge Graph, a connected map of every resource, access role, cost line item, security finding, and observability signal in your environment, plus the relationships between them. This is what lets Sherpa answer cross-domain questions that single-purpose dashboards cannot, such as: "Which security findings sit on resources that also drive my top 10 cost lines?" The expensive problems live between the domains, and Sherpa is built to see them.

Sherpa ingests your full cost and usage data and connects every line item back to the account, service, and resource driving spend. Rather than static dashboards, Sherpa explains why your bill changed and recommends what to do about it, surfacing idle resources, rightsizing opportunities, Savings Plan and Reserved Instance coverage, Graviton moves, and anomalies through natural-language conversation.

Agentless cloud security posture management (CSPM), identity and entitlements analysis (CIEM), external attack surface management (ASM), and shift-left source-code scanning, all reachable through conversational queries. Ask Sherpa about misconfigurations, overprivileged roles, or exposed endpoints and get the exact resource, the impact, and clear remediation guidance.

Built on OpenTelemetry standards, Sherpa ingests metrics, logs, and traces from your existing collectors for cross-domain correlation. Connect a cost spike to the deployment and trace that caused it, bridging the gap between operational events and financial impact.

Sherpa does not just surface findings, it proposes the fix. For a rightsizing, scheduling, cleanup, or security remediation, Sherpa Automate generates the exact action plan: console steps, AWS CLI, and CloudFormation or Terraform, complete with safety pre-checks. A human approves before anything runs, and Sherpa never changes a resource on its own. You stay in control, with a full audit trail of every decision.

Understanding your cloud is the starting point; deep research is where you go next. Sherpa Research runs a deep, multi-source investigation against your live environment and the materials you provide, then returns a clear, fully cited report in minutes, the kind of analysis that used to take a consultant weeks. Model a migration, evaluate a modernization path, or pressure-test a new architecture or AWS service, with every answer grounded in your real cost, security, observability, and operations data rather than generic best practices.

• CloudFormation Access - Connect through a scoped, revocable cross-account IAM role deployed via a CloudFormation StackSet you review before anything is created. Analysis access is read-only, built on AWS-managed read-only policies.
• You stay in control - Sherpa never mutates your resources. Operations is human-in-the-loop: Sherpa proposes the exact fix and a person approves before anything runs.
• Per-organization isolation - Your environment data is stored in infrastructure scoped to your organization and never co-mingled with another tenant's. It is encrypted at rest and in transit, with least-privilege access, short-lived credentials, and role-based access control on every internal query path. You remain the owner and data controller; Sherpa acts as the processor. Sherpa is actively pursuing SOC 2 Type II certification.
• Conversational interface - Ask questions in plain English and get answers that trace across cost, security, observability, and operations, then act on them with your approval.

Subscribe through AWS Marketplace to connect your environment and begin exploring your cost and security posture. Deploy the provided CloudFormation StackSet to grant scoped, read-only IAM access, and Sherpa begins building your Knowledge Graph automatically. To discuss your environment or arrange onboarding, reach out to the Sherpa team at info@sherpa-agent.com .