{"id":"https://openalex.org/W7225802998","doi":"https://doi.org/10.5281/zenodo.24129039","title":"A Comparative Literature Review of Built-in AI-Powered Incident Response Agents Across AWS, Microsoft Azure and Google Cloud Platform","display_name":"A Comparative Literature Review of Built-in AI-Powered Incident Response Agents Across AWS, Microsoft Azure and Google Cloud Platform","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225802998","doi":"https://doi.org/10.5281/zenodo.24129039"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24129039","doi":"https://doi.org/10.5281/zenodo.24129039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24129039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24129039","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5144193933","display_name":"Kaushik Joshi","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kaushik Joshi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5161460321","display_name":"Hemant Patil","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hemant Patil","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5161440639","display_name":"Harsh Patel","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Harsh Patel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5161441271","display_name":"Pravin Wavare","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pravin Wavare","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.006800000090152025,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8118000030517578},{"id":"https://openalex.org/C9903902","wikidata":"https://www.wikidata.org/wiki/Q3025536","display_name":"DevOps","level":3,"score":0.8072999715805054},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.722599983215332},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.46639999747276306},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4514999985694885},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3995000123977661},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.37310001254081726},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.34290000796318054},{"id":"https://openalex.org/C2781055072","wikidata":"https://www.wikidata.org/wiki/Q25325266","display_name":"Cloudlet","level":3,"score":0.3230000138282776},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2994999885559082},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.298799991607666},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.29170000553131104},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.28209999203681946},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27469998598098755},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.2540000081062317},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.25369998812675476},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24129039","doi":"https://doi.org/10.5281/zenodo.24129039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24129039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.24129040","doi":"https://doi.org/10.5281/zenodo.24129040","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24129040","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24129039","doi":"https://doi.org/10.5281/zenodo.24129039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24129039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0,134],"today's":[1],"cloud":[2,60,84],"Amazon":[3],"Web":[4],"Services":[5],"(AWS),":[6],"Microsoft":[7],"Azure":[8,136,145,148,193],"and":[9,20,53,65,76,89,128,139,143,146,151,186,211,239,260,292],"Google":[10],"Cloud":[11],"Platform":[12],"(GCP)":[13],"environments,":[14],"traditional":[15],"incident":[16],"response":[17,209],"becomes":[18,80],"cumbersome,":[19],"vulnerable":[21],"to":[22,82,161,205,236,243],"human":[23],"error.":[24],"While":[25,91],"Artificial":[26],"Intelligence":[27],"for":[28,163,227,273,289],"IT":[29],"Operations":[30],"(AIOps)":[31],"helped":[32],"with":[33,231,281],"machine":[34],"learning":[35],"in":[36,48,71,124,144],"the":[37,57,68,115,121,130,168,244,303],"area":[38],"of":[39,59,87,120,167,217,305],"anomaly":[40],"detection,":[41],"it":[42,79,252],"remained":[43],"advisory.":[44],"The":[45,256,283],"recent":[46,69],"advances":[47],"Large":[49,72],"Language":[50,73],"Models":[51,74],"(LLMs)":[52,75],"Agentic":[54,77],"AI":[55,107,117],"enable":[56],"construction":[58],"architectures":[61,85],"that":[62,96,265,300],"can":[63],"self-repair":[64],"function":[66],"autonomously.With":[67],"advancements":[70],"AI,":[78,154],"possible":[81],"develop":[83],"capable":[86],"self-healing":[88],"self-operationalizing.":[90],"there":[92],"are":[93,189],"many":[94],"works":[95],"introduce":[97],"a":[98,103,125,155,164,207,223,228,249,297,306],"theoretical":[99],"approach,":[100],"or":[101],"review":[102],"single":[104],"vendor's":[105],"built-in":[106,116],"incident-response":[108,118],"agent,":[109],"no":[110],"empirical":[111],"study":[112],"directly":[113],"compares":[114],"agents":[119,263],"major":[122],"hyperscalers":[123],"similar":[126],"workload":[127],"using":[129],"same":[131],"fault":[132],"injections.":[133],"AWS,":[135],"SRE":[137,149,194],"Agent":[138,150,195,221],"AWS":[140,219],"DevOps":[141,220],"Agent,":[142],"GCP,":[147],"GCP":[152,259,266],"Security":[153],"standardized":[156],"application":[157],"(cloud_incident_tester)":[158],"is":[159,264],"deployed":[160],"allow":[162],"fair":[165],"comparison":[166],"two":[169],"agents.":[170],"Detection":[171],"Latency,":[172],"Investigation":[173],"Wall":[174],"Clocks":[175],"Time,":[176],"Root":[177],"Cause":[178],"Analysis":[179],"(RCA)":[180],"accuracy,":[181],"Tool":[182],"execution":[183],"error":[184],"recovery,":[185],"Governance":[187],"guardrails":[188],"what":[190],"we":[191],"measure.":[192],"reduces":[196],"autonomous":[197,262],"resolution":[198],"time":[199],"(3m":[200],"40s-":[201],"5m00s),":[202],"but":[203,275],"needs":[204],"have":[206],"binding":[208],"plan,":[210],"will":[212,240],"incur":[213],"continuous":[214],"billing":[215],"costs":[216],"$0.40/hr.":[218],"provides":[222],"deep":[224],"investigative":[225],"capability":[226],"multi-region":[229],"infrastructure":[230,245],"parallel":[232],"subagents":[233],"(9m":[234],"30s":[235],"15m":[237],"23s),":[238],"identify":[241],"misconfigurations":[242],"without":[246],"relying":[247],"on":[248],"governance":[250],"model\u2013":[251],"just":[253],"proposes":[254],"them.":[255],"difference":[257],"between":[258],"other":[261],"does":[267],"not":[268],"provide":[269,285],"any":[270],"individual":[271],"agent":[272],"users,":[274],"only":[276],"enterprise":[277],"organization":[278],"security":[279],"features":[280],"AI.":[282],"findings":[284],"useful":[286],"reference":[287],"points":[288],"technology":[290],"leaders":[291],"reveal":[293],"configuration":[294],"issues":[295],"at":[296],"system":[298],"level":[299],"could":[301],"affect":[302],"reliability":[304],"cloud.":[307]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}