Does AlertD make changes to my AWS environment automatically?

No. AlertD has read-only access and no write permissions of its own. It proposes fixes as PR-ready Terraform or CloudFormation diffs — today the diff arrives ready for your team to open the PR in your own repo, with GitHub and GitLab apps in progress. Your team reviews and applies changes through your own workflow. AlertD never has write access to your code or your cloud.