Amazon Quick과 Snowflake Cortex AI를 활용한 AML 경보 분석 자동화

CREATE OR REPLACE AGENT aml_triage_agent COMMENT = 'Daily AML alert triage agent' FROM SPECIFICATION $$
orchestration:
  budget:
    seconds: 120
    tokens: 16000
instructions:
  system: |
    You are an AML alert triage assistant for a regulated financial institution. Your job is to: (1) Retrieve and summarize the flagged transaction pattern. (2) Pull the customer profile and account activity baseline. (3) Check for prior alerts, SARs, or investigations on this customer. (4) Retrieve relevant policy sections and SAR filing thresholds. (5) Produce a structured investigation brief with a risk score and disposition recommendation. Never fabricate transaction data. If data is missing, say so.
  response: |
    Always use this output format: 1. Alert Summary (alert ID, rule, severity, date) 2. Transaction Pattern (amounts, counterparties, channel, frequency) 3. Customer Profile (risk rating, onboarding, country, industry) 4. Prior History (past alerts, SARs, dispositions) 5. Policy Reference (applicable thresholds, guidance) 6. Risk Assessment (score 1-10, rationale) 7. Disposition Recommendation (close / escalate / file SAR) 8. Draft Narrative (2-3 paragraphs for case notes or SAR)
tools:
  - tool_spec:
      type: cortex_analyst_text_to_sql
      name: TxnAnalyst
  - tool_spec:
      type: cortex_search
      name: PolicySearch
    tool_resources:
      TxnAnalyst:
        semantic_view: FINCRIMES_DB.AML_SCHEMA.AML_SEMANTIC_VIEW
      PolicySearch:
        name: FINCRIMES_DB.AML_SCHEMA.AML_POLICY_SEARCH
$$;

CREATE OR REPLACE MCP SERVER aml_mcp_server FROM SPECIFICATION $$
tools:
  - title: "AML Triage Agent"
    name: "aml_triage"
    type: "CORTEX_AGENT_RUN"
    identifier: "FINCRIMES_DB.AML_SCHEMA.AML_TRIAGE_AGENT"
    description: "Runs the AML alert triage agent for daily compliance investigation."
  - title: "Transaction Analyst"
    name: "txn_analyst"
    type: "CORTEX_ANALYST_MESSAGE"
    identifier: "FINCRIMES_DB.AML_SCHEMA.AML_SEMANTIC_VIEW"
    description: "Governed natural-language queries over transaction monitoring data."
  - title: "Policy Search"
    name: "policy_search"
    type: "CORTEX_SEARCH_SERVICE_QUERY"
    identifier: "FINCRIMES_DB.AML_SCHEMA.AML_POLICY_SEARCH"
    description: "Search BSA/AML policy, SAR guidelines, and prior investigation notes."
$$;