DevWAFOps: A Pre-Deployment LLM-Driven Framework For Early Compliance Assessment In Cloud Environments

Abstract

## DevWAFOps: Secure Cloud Architecture Assessment Engine (SCAAE) This capsule is the reference implementation for the research paper: **"DevWAFOps: A Pre-Deployment LLM-Driven Framework For Early Compliance Assessment In Cloud Environments"** Published in IEEE Cloud 2026. ### What This Capsule Does The SCAAE is an LLM-powered conversational engine that conducts automated Well-Architected Framework (WAF) compliance assessments before cloud deployment. It uses Meta Llama 3.3 70B Instruct via OpenRouter to: - Conduct multi-turn WAF assessments across the 5 AWS pillars (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization) - Analyze architect responses using a 7-point maturity signal schema - Generate prioritized recommendations and executive summary reports (PDF) - Integrate DAST scanner output normalization and context-aware vulnerability prioritization ### Model `llama-3.3-70b` served via groq and OpenRouter with dual-key automatic failover for high availability. ### Reproducibility Running this capsule executes the full LLM assessment verification suite and exports generated reports to the Results pane.