A deployable AWS CDK (TypeScript) sample that stands up an AWS Network Firewall environment (logging, CloudWatch alarms, a least-privilege agent role, and an auto-created DevOps Agent space) with three reproducible break-fix scenarios that AWS DevOps Agent investigates using native AWS APIs. - View it on GitHub