Yea, I'd be very happy with these systems if I could vend and rotate tempary read only credentials to these agents.
I can't get a read only API key for my YouTube, Gmail, Outlook etc etc accounts. Only full admin access via a browser.
I can get r/o creds for things like GitLab and AWS and K8s, which means I'm very happy to let my agents run wild at work because I know for certain they actually can't do any damage, they can read all they want but can only go as far as opening and MR that I can review and merge.
I can't get a read only API key for my YouTube, Gmail, Outlook etc etc accounts. Only full admin access via a browser.
I can get r/o creds for things like GitLab and AWS and K8s, which means I'm very happy to let my agents run wild at work because I know for certain they actually can't do any damage, they can read all they want but can only go as far as opening and MR that I can review and merge.