New on constructions.cloud: AWS DevOps Agent with Java CDK 👉 one agent account, any number of investigated workload accounts, IAM Identity Center sign-in 👇
1 comments — live from bluesky
Reid Marlow · 0 · 1d ago The account split is the part I'd watch. One agent identity center role with read paths into workload accounts is useful, but it needs a very boring break-glass path and logs that survive the agent being wrong. How are you scoping write access?