用 Amazon Q 统一六套系统搜索、自动化文档流程——Aderant 的云运维实践

┌─────────────────────────────────────────────┐
│           Amazon Q Business 应用             │
│  ┌─────────┐  ┌──────────┐  ┌────────────┐  │
│  │ 统一搜索 │  │ 文档生成 │  │ 对话式问答 │  │
│  └─────────┘  └──────────┘  └────────────┘  │
│                     │                        │
│          ┌──────────┴──────────┐             │
│          │   统一索引 + RAG    │             │
│          └──────────┬──────────┘             │
│                     │                        │
│   ┌─────┬─────┬─────┬─────┬─────┬─────┐     │
│   │ SNow│Jira │Conf │Git  │CMDB │Logs │     │
│   └─────┴─────┴─────┴─────┴─────┴─────┘     │
└─────────────────────────────────────────────┘

# 创建应用
aws qbusiness create-application \
  --display-name "ops-unified-search" \
  --identity-center-instance-arn "arn:aws:sso:::instance/ssoins-xxxxxxxxxxxxx" \
  --region us-east-1

# 记下返回的 appId，例如：appId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

# 创建索引
aws qbusiness create-index \
  --application-id "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" \
  --display-name "ops-index" \
  --type ENTERPRISE \
  --region us-east-1

# 记下返回的 indexId

# ServiceNow connector
aws qbusiness create-data-source \
  --application-id "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" \
  --index-id "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy" \
  --display-name "servicenow-incidents" \
  --data-source-type "SERVICENOW" \
  --configuration '{"servicenowConfiguration":{"instanceUrl":"https://yourorg.service-now.com","authType":"basic","secretArn":"arn:aws:secretsmanager:us-east-1:123456789012:secret:snow-creds"}}' \
  --region us-east-1

# Confluence connector
aws qbusiness create-data-source \
  --application-id "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" \
  --index-id "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy" \
  --display-name "confluence-kb" \
  --data-source-type "CONFLUENCE" \
  --configuration '{"confluenceConfiguration":{"instanceUrl":"https://yourorg.atlassian.net/wiki","authType":"apiToken","secretArn":"arn:aws:secretsmanager:us-east-1:123456789012:secret:confluence-creds"}}' \
  --region us-east-1

import boto3
import json

q_client = boto3.client("qbusiness", region_name="us-east-1")

APP_ID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

def unified_search(query: str, user_id: str = "ops-engineer@example.com"):
    """跨所有已接入数据源统一检索"""
    resp = q_client.search(
        applicationId=APP_ID,
        queryText=query,
        userId=user_id,
    )
    results = resp.get("results", [])
    for r in results:
        source = r.get("sourceAttribution", [{}])[0].get("sourceLocation", "unknown")
        snippet = r.get("documentExcerpt", {}).get("text", "")
        print(f"[{source}] {snippet[:200]}")
    return results


def generate_change_doc(change_id: str, user_id: str = "ops-engineer@example.com"):
    """基于检索结果自动生成变更文档草稿"""
    # 先检索关联信息
    context_parts = []
    for q in [f"change record {change_id}", f"incident related to {change_id}", f"KB article about {change_id}"]:
        results = unified_search(q, user_id)
        for r in results:
            context_parts.append(r.get("documentExcerpt", {}).get("text", ""))

    # 用 Q Business 的对话能力生成文档
    prompt = (
        f"根据以下运维上下文，生成一份标准变更文档草稿，包含：变更背景、影响范围、执行步骤、回滚方案。\n"
        f"上下文：\n{json.dumps(context_parts[:5], ensure_ascii=False)}"
    )
    resp = q_client.chat(
        applicationId=APP_ID,
        userId=user_id,
        userMessage=prompt,
    )
    return resp.get("systemMessage", "")


# 使用示例
if __name__ == "__main__":
    # 搜索某个故障的完整上下文
    print("=== 统一搜索 ===")
    unified_search("production database connection timeout last week")

    # 自动生成变更文档
    print("\n=== 自动生成变更文档 ===")
    doc = generate_change_doc("CHG-2024-0089")
    print(doc)

# 为数据源创建定时同步计划（每6小时）
aws qbusiness update-data-source \
  --application-id "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" \
  --data-source-id "ds-servicenow-id" \
  --sync-schedule "cron(0 0/6 * * ? *)" \
  --region us-east-1