AEGIS‑EDGE — AWS Reference Architecture
Governable cooperative counter‑UAS · deterministic gate at the edge · human authorizes every kill · LLM off the kill chain · resilient under DDIL  ·  GovCloud IL5 · us-east-1 · acct 521034048482
Compute Analytics Storage / IoT Machine Learning Security & Identity Mgmt & Gov
AWS Cloud
◉ Tactical Edge — AWS Snowball Edge / AWS IoT Greengrass
runs OFFLINE in DDIL
◎
Radar
kinematics
≈
RF / SIGINT
emitter DF
▣
EO / IR
thermal / visual
⌁
Effector
SAPIENT / BSI 335
1 ↓ sensors → tracks  2
≋
Amazon Kinesis
Data Streams
cuas-demo-tracks
3 ↓ ingest
◉
AWS IoT Greengrass v2 core — cuas-core · EC2 t3.small
IMM tracker → deterministic ROE gate (~0.58 µs) → hash-chained ledger. Human gate + two-person auth. Decides locally with no cloud.
4 ↓ engage (human-approved) → effector  ·  7 operator C2
◧
Operator C2
3D sim / 2D console
approves every kill
▤ AWS GovCloud (US) · VPC — IL5 boundary
explain · store · govern
✦
Amazon Bedrock
Claude / Nova assessment
off the kill chain
6 async · throttled (narrates a sample)
⛁
Amazon S3
Object Lock (WORM)
signed ledger
⚿
AWS KMS
encryption keys
5 signed audit → immutable store
⚇
AWS IAM + IoT TES
least-privilege
no keys on device
◔
Amazon CloudWatch
telemetry / SLO

Data flow — one governed decision

  1. 1Radar / RF / EO-IR sensors produce real drone tracks (fused, IMM).
  2. 2Tracks stream to Amazon Kinesis Data Streams (cuas-demo-tracks).
  3. 3Greengrass core ingests: IMM predictor → deterministic ROE gate (~0.58 µs).
  4. 4Gate recommends → human two-person gate approves → effector (SAPIENT).
  5. 5Every action → hash-chained ledger → Amazon S3 Object Lock (WORM), KMS-encrypted.
  6. 6On escalation only → Amazon Bedrock explains (async, off the kill chain).
  7. 7IAM + IoT Token Exchange issue scoped, keyless creds; CloudWatch observes.
  8. ✓Link and cloud denied (DDIL)? Steps 1–5 keep running on the edge — only step 6 defers.
Edge decides; cloud explains & remembers. The kill chain is deterministic and offline-capable — when comms are jammed the Greengrass gate keeps governing locally; the LLM only narrates and never authorizes a shot. Verified runtime: Kinesis → Greengrass v2 (EC2 t3.small) → Bedrock, Token Exchange Service roles (no keys on device), least-privilege (Kinesis-read + Bedrock + S3).