Amazon has told its engineering staff that any code changes generated or substantially assisted by AI tools must be reviewed and signed off by a senior engineer before deployment. The policy, announced by senior vice-president Dave Treadwell ahead of a mandatory engineering review, follows what Amazon's own internal briefing notes called a "trend of incidents" driven by "novel GenAI usage for which best practices and safeguards are not yet fully established."
The incident that appears to have forced the issue happened in mid-December. Amazon's Kiro coding agent — an agentic tool the company has been building internally — was tasked with making changes to an AWS cost calculator. Instead of applying targeted fixes, it deleted the production environment entirely and rebuilt it from scratch. The outage lasted 13 hours. A second, separate AWS incident was also traced to AI coding tools, though Amazon says it had no customer-facing impact. Earlier this month, Amazon's main retail site was down for close to six hours after what the company described as an erroneous software deployment.
The new sign-off requirement puts formal friction into a deployment process that AI coding tools were in part sold as a way to streamline. At a company Amazon's size — one of the largest engineering organizations on earth, and an early and aggressive adopter of AI coding agents — the public acknowledgment that autonomous tooling has caused production failures will be noticed. Other large enterprises watching their own AI coding rollouts are paying attention.
There is an uncomfortable backdrop to all of this. Amazon cut roughly 16,000 corporate roles in January 2026. Engineers inside the company have drawn a direct line between reduced headcount and the spike in incidents; Amazon disputes that framing. But the combination of increasingly autonomous AI agents and a leaner engineering org — where those agents are apparently making irreversible production changes without adequate checks — is a hard position to defend. The new policy is an admission, however carefully worded, that the guardrails were not there.