Give Claude its own AWS keys

Give Claude its own AWS keys

Or any agentic coding assistant.

It blows my mind how many senior engineers with admin rights.

I’ve said previously treat Claude like an intern that can Google incredibly fast.

Would you give your intern admin access to AWS with the ability to create, update, or delete any part of your infra?

My guess is, just like most info sec oversights, these engineers don’t realize how much damage a few simple CLI commands can do.

It's easier for me to do if you confine Claude code to a container and not give it free rein of your host system like I do.

If you are using an agent to code or otherwise have terminal access to a machine with any significant amount of AWS privileges, you will want to limit that as soon as possible.