News for hackers. Stuff that matters.

A comment on Ask HN: How do you give AI agents access without over-permissioning?. Parent comment

Re:Ask HN: How do you give AI agents access without over-per... by verdverm on Monday February 02, 2026 @05:31PM (#46862877)
Maybe the problem is your SaaS choices

I don't have problems with permissions in any of those things you listed. Do mainly k8s based infra

[ Parent | on HN ]
Re:Ask HN: How do you give AI agents access without over-per... by vitramir on Monday February 02, 2026 @06:01PM (#46863413)
terraform cloud, argocd, vercel and supabase (modern stack for micro apps), sentry (doesn't have per project permissions), sendgrid, etc...

What does your stack look like beyond Kubernetes and AWS? It’s hard to imagine everything there supports truly fine-grained permissions.

[ Parent | on HN ]
Re:Ask HN: How do you give AI agents access without over-per... by verdverm on Monday February 02, 2026 @07:24PM (#46864459)
Actually, almost everything stays within the private cloud, health care industry

GCP (main), AWS/Azure (b/c customers), Jenkins/Argo

TF/Helm are IaC and run from containers, no hashicorp services

CloudSQL, why are you sending your db queries to a SaaS?

LGTM for observability

The vendors we do have are WIF'd (i.e. code & secops scanning)

WIF is the key, mature vendors are supporting WIF, and amazingly the hyperscalers are supporting each others WIFs for cross-cloud, so we can give a GCP SA, AWS perms and vice versa

[ Parent | on HN ]