Building an Agentic App Deployer with Amazon Bedrock and AWS Lambda
Anthropic
OpenAI
PDI Technologies built PDI Brew, an agentic system that lets non-technical employees describe internal tools in plain English and receive a fully provisioned, multi-tenant web application on AWS within seconds. The system uses a two-agent architecture: a planning agent (either a skill in an AI assistant or an Amazon Bedrock invocation) and a provisioning agent running on AWS Lambda. All apps inherit enterprise SSO, scoped IAM, and a governed AI gateway via Amazon Bedrock.
PDI Technologies, a company serving convenience retail and petroleum wholesale industries, developed PDI Brew to address the long tail of internal tools that never get built due to traditional deployment pipelines. PDI Brew allows non-technical employees to describe a tool in plain English and receive a fully provisioned, multi-tenant web application on AWS within seconds, complete with single sign-on (SSO) and no need for Git, terminals, or DevOps knowledge. The architecture separates planning and provisioning: a planning agent captures user intent and emits a structured deploy manifest, while a provisioning agent on AWS Lambda decomposes that manifest, classifies the workload, selects tools, and orchestrates creation of all downstream AWS resources. The planner is pluggable, with two paths: a Vibe App Builder skill that runs inside an existing AI assistant like Claude or ChatGPT, or an Amazon Bedrock invocation within the AWS trust boundary. The provisioning agent uses AWS SDK and Microsoft Graph APIs, handles long-running steps via asynchronous self-invocation, and classifies apps as static or full-stack. Apps run on a dual-tier compute model: shared CRUD Lambda for most, and per-app Lambda with scoped IAM only for those needing specific capabilities, gated by admin approval. In-app AI features are provided through a governed gateway to Amazon Bedrock, with guardrails, quotas, and audit trail, never exposing model keys to app authors.
- Abbreviations
- SSO = Single Sign-On — единый вход
- AWS = Amazon Web Services — Amazon Web Services
- JSON = JavaScript Object Notation — обозначение объектов JavaScript
- HTTPS = HyperText Transfer Protocol Secure — защищённый протокол передачи гипертекста
- API = Application Programming Interface — программный интерфейс приложения
- JWT = JSON Web Token — JSON веб-токен
- CRUD = Create, Read, Update, Delete — создание, чтение, обновление, удаление
- IAM = Identity and Access Management — управление доступом и идентификацией
- SDK = Software Development Kit — комплект разработчика
Source: AWS ML blog —
original
