Closed-loop automation with AI-assisted diagnosis and remediation across observability, ITSM, and cloud event sources. Start with the foundational guide below (Crawl/Walk/Run and six use cases live there), then explore the guides in this category.
Solution Guide
Foundational
AIOps automation with Ansible
Foundational reference for Crawl/Walk/Run, six operational use cases, and governed automation with EDA and observability or ITSM. Start here before the guides below.
Solution Guide
AIOps
Automated Incident Remediation with IBM Instana
Closed-loop incident remediation integrating IBM Instana observability with Event-Driven Ansible for automatic detection, AI-driven job template routing, and self-healing infrastructure.
Solution Guide
AIOps
Unlock AIOps with ServiceNow LEAP and Ansible MCP server
Cut incident MTTR from hours to minutes: LEAP identifies remediation opportunities, the Ansible MCP server surfaces approved playbooks, and governed execution closes incidents with full audit trail.
Solution Guide
AIOps
AIOps with Splunk and Event-Driven Ansible
Three use cases for closed-loop AIOps: ITSI predictive anomaly detection with MLTK, RHEL server remediation with AI-enriched diagnostics, and network OSPF remediation with Automation code assistant-generated playbooks.
Solution Guide
AIOps
Windows Certificate Rotation with AI Risk Analysis
Automate Windows certificate rotation end-to-end: Event-Driven Ansible detects expiring certs, AI evaluates risk and timing, Ansible performs the rotation, and ITSM documents the full audit trail.
Work in Progress
AIOps
AIOps with AWS SQS and Event-Driven Ansible
Connect Amazon SQS to Event-Driven Ansible so CloudWatch, EventBridge, and other AWS events trigger AI diagnosis and automated remediation without custom polling or Lambda glue code.
Work in Progress
AIOps
Event-Driven Remediation with Azure Service Bus
Connect Azure Service Bus Queues to Event-Driven Ansible for real-time event consumption, AI-driven diagnosis, and automated remediation across hybrid Azure infrastructure.
Work in Progress
AIOps
RHEL Patching with Red Hat Lightspeed and Ansible MCP Server
Collapse CVE patching from days to minutes: Red Hat Lightspeed MCP identifies vulnerable RHEL VMs on OpenShift Virtualization, the AAP MCP server surfaces approved remediation, and governed execution patches the fleet with full audit trail.
Work in Progress
AIOps
Consuming OpenShift API Resources with EDA and Kafka
Capture OpenShift Namespace lifecycle events via Knative APIServerSource, stream them through Kafka, and surface them in Event-Driven Ansible for logging and downstream automation.
Solution Guide
AIOps
Security
AI-Driven CVE Routing and Remediation with Automation orchestrator
One Automation orchestrator workflow handles every CVE type. An AI triage step reads SBOM correlation results and routes to OS patch, app container rebuild, compensating controls, or log-only, with human approval before any production change.
Automation orchestrator
Network source of truth, configuration, and failover patterns. NetBox acts as inventory and intent, with Event-Driven Ansible where state changes should trigger governed execution.
Solution Guide
Network
Event-Driven Network Source of Truth with NetBox and AAP
Dynamic inventory from NetBox, event-driven NTP and banner configuration via config contexts and EDA webhooks, and zero-touch device provisioning workflows.
Solution Guide
Network
Event-Driven WAN Circuit Failover with NetBox and AAP
Event-driven WAN circuit failover using NetBox as the network source of truth, EDA for automated trigger, dynamic backup discovery, router reconfiguration, and automated incident reporting.
Work in Progress
Network
Intelligent Network Automation with Gluware and Ansible
Configuration compliance with closed-loop remediation, multi-vendor OS upgrades, and complex NAC deployments. AAP is the orchestration plane and Gluware is the network intelligence layer.
Work in Progress
AIOps
Network
Closed-Loop Network Remediation with LogicMonitor and Edwin AI
A crawl-walk-run maturity model for closed-loop network remediation: LogicMonitor alerts trigger Event-Driven Ansible, progressing from a single BGP-reset job template, to Edwin AI-enriched branched workflows, to agentic remediation via the AAP MCP Server.
Automated security response, compliance enforcement, and threat mitigation using Ansible Automation Platform.
Solution Guide
Security
Automated runtime mitigation for Linux OT hosts
Closed-loop automated enforcement architecture using Falco for runtime syscall monitoring and Event-Driven Ansible to dynamically apply MITRE ATT&CK mitigation policies.
Solution Guide
Security
Proactive Vulnerability Remediation with Satellite and Event-Driven Ansible
Closed-loop CVE detection and remediation: a Satellite webhook triggers Event-Driven Ansible, which launches an AAP job to scan on-premises Lightspeed Vulnerability data and install Critical/Important fixes across the fleet. The pattern is fully air-gap capable.
Solution Guide
Security
Automated Brute-Force Remediation with Event-Driven Ansible
Closed-loop brute-force containment: Splunk detects SSH authentication failures, EDA routes the alert to AAP, which revokes HashiCorp Vault database credentials and stops the compromised service in seconds.
Solution Guide
Security
Automated CVE Response with Policy-Gated Patching and Compliance Evidence
Three-phase automated CVE response. EDA contains the threat in seconds from a Splunk alert, OPA gates the patch with policy checks and human approval, then a compliance pipeline generates before/after evidence and a scanned container image.
Solution Guide
Security
Enforcing Compliance and Network Governance
Continuous compliance monitoring with EDA drift remediation, OPA contextual change-control gates (blast radius, change windows, ITSM tickets), and SPIFFE/SPIRE workload identity, with a full audit trail in AAP Controller.
Solution Guide
Security
Zero Trust Architecture Infrastructure with Ansible Automation Platform
AAP 2.6 as the NIST SP 800-207 Policy Enforcement Point. Identity (IdM), policy (OPA), secrets (Vault), workload identity (SPIFFE/SPIRE), and network enforcement (Arista) wire into one auditable automation fabric.
Zero Trust
Solution Guide
Security
Automated Vulnerability Remediation with Lightwell and Ansible
Event-driven CVE-to-patch pipeline. Lightwell events trigger EDA, which correlates CVEs against RHTPA SBOMs and automatically patches OS packages or triggers application container rebuilds.
Solution Guide
Security
Automated CVE Response and Compliance Verification with CME
Automate the full CVE response lifecycle with 118 compliance-as-code controls. CME maps CVEs to defensive controls, verifies fleet posture, remediates automatically, and calculates CVSS score attenuation.
Solution Guide
Security
RHEL 9 STIG and CIS Compliance Scanning with Ansible
Agentless OpenSCAP scanning against DISA STIG V2R8 and CIS Benchmarks Level 1 and Level 2. No permanent scanner footprint, per-host NDJSON findings to a dashboard, and tag-scoped remediation that applies only the rules you choose.
Solution Guide
Security
PQC Discovery
Assess Post-Quantum Cryptography (PQC) readiness across RHEL 8/9/10 and provide automated remediation for system crypto-policies, SSH, and nginx.
Implementation Guide
High-Availability AAP with EDB PostgreSQL DR
Multi-datacenter Active-Passive disaster recovery for Ansible Automation Platform using EDB Postgres Advanced Server and EDB Failover Manager with sub-5-minute RTO.
Implementation Guide
AI Infrastructure automation with Ansible
Provision and configure Red Hat AI infrastructure, from GPU instances to serving models, using the infra.ai and redhat.ai collections.
Implementation Guide
Intelligent Assistant with Red Hat AI Inference Server
Deploy and configure a self-hosted LLM using Red Hat AI Inference Server on RHEL with GPU acceleration to power the Automation intelligent assistant in AAP.
Implementation Guide
AI-Assisted Ansible Developer Experience
Standardize your automation developer experience across the organization using Ansible Development Tools, from individual uv/pip installs to enterprise-governed Dev Spaces with 5-minute onboarding.
Ansible Content Tools
Work in Progress
Implementation Guide
Ansible Development Workspaces
Tiered image layering strategy for Ansible Dev Spaces on OpenShift. Deliver governed, customizable development environments across multiple automation domains using standard BuildConfigs and ImageStreams.
OpenShift Dev Spaces
Implementation Guide
AAP HA/DR on OpenShift with CloudNativePG
Two-site active-passive disaster recovery for Ansible Automation Platform 2.7 on OpenShift using CloudNativePG cross-cluster replication, shared secrets, and controlled switchover procedures.
Implementation Guide
PostgreSQL Autovacuum Tuning for AAP
Three targeted autovacuum parameter changes, tested in order of impact, keep large AAP tables continuously clean at enterprise scale.
Contributing
Writing a new guide? Start with the Best Practices hub. Choose the Solution Guide or Implementation Guide framework, scoring rubric, and starter template for your content type.
Legacy Solution Guides (Under Review)
These solution guides were published on access.redhat.com before this repository existed. They are being reviewed and will be migrated to the new format as full markdown guides.
ServiceNow ITSM Ticket Enrichment
Automate ServiceNow ticket creation and enrich incidents with CVE data from Red Hat Insights.
Get started with EDA (Ansible Rulebook)
Fundamentals of Event-Driven Ansible: rulebooks, event sources, conditions, and actions.
Network Back Up and Configuration
Backup, configure, and restore network devices using the network.backup validated content collection.
Network Fact Gathering & Reporting
Collect network device facts and export structured data for compliance reporting.