washbasin
Joined 8 months ago
Joined 8 months ago
I love the bullet point(s) : we don't trust [aircraft] pilots to catch automations mistakes (e.g. autopilot), but we are expecting humans to catch LLM mistakes.
Artificial Intelligence Natural Stupidity - Brandon Sherman
So hot take: this would only be useful in places where there are not a lot of ticks?
(PS: Permethrin-sprayed clothing is very effective.)
Scroll, scroll, scroll, scroll, scroll, scroll, scroll, scroll, scroll, scroll, scroll.
Just no.
On the technical side, you are probably underestimating the access you need to accurately gather the information the tool needs. For example, last time I reviewed the AWS-Managed ReadOnly role it does not allow you to read some important things like Managed Prefix Lists.
I completely understand you need a starting point and you picked a good one. Anxious to see how this proceeds. Best of luck.
The most common issues are:
- They rely on https://github.com/mingrammer/diagrams which has simply not gotten any attention for a long time. It's too out-of-date to be useful, and any issue with rendering gets a response to "go use graphviz instead"
- When pointing these tools to anything moderately complicated, they implode or create non-nonsensical diagrams. Think: VPC Peering, VPC Security Groups, multi-account resources.
- They get the cloud resources OK, but neglect primitives like routing and policies that are just as important.
Just looking at the examples on the website: Claude Code can do this natively. Just a consideration.
I will also echo what others have said: allowing another account access to ours is a non-starter, even if Read-Only. It needs to use a security principal we have complete control over.
I can't tell from the project page what IAM permissions are in your "Read-only IAM role". That's something I would also need to know, regardless of how it is deployed.
I can tell from this post and the site that this is a labor of love, and I hope you keep up the good work. Like I said, this is an area where we need more, better tools. I want projects like this to succeed.
PS: Awesome name
I don't want to read content like a receipt from the grocery store.
I instantly go to Reader Mode in my browser when I see pages like this. Is this because of phones? Why can't it adapt? My 42" monitor wants to know.