AUTOPILOT · INCIDENT PASS
Let the AI look. Not keep the keys.
When production breaks, give Autopilot one cloud account, the regions that matter and a few minutes of read-only access. The pass expires on its own, and every read is counted.
The usual way
Production is down, and the AI wants a key.
ReadOnlyAccess · all regions · no expiry
Example data.
Incident Pass
A pass with no regions covers nothing.
Leave empty to cover the whole region.
Why goes in the audit record.
Autopilot
Production is broken and you want Autopilot to look.
Give it one slice of one cloud account, for a few minutes, read-only, instead of giving it a key.
- 01Production breaks
- 02Open a narrow pass
- 03Autopilot reads, inside the pass
- 04Outside? Refused.
- 05It explains what happened
- 06The pass runs out
- 07Checked at every read
Example data.
How it works
Narrow, look, expire
Open a narrow pass
Choose one cloud account, required regions, an optional name prefix, minutes and why. The reason goes in the audit record.
AWS · shop-prod
Example data.
Example data.
Autopilot reads inside it
Zaysa checks each read against the pass and counts every read under it. Autopilot never receives a key.
Example data.
Example data.
It expires on its own
Expiry is checked at each read. An expired or revoked pass covers nothing.
expired · covers nothing
Example data.
Example data.
Scope
Narrower is safer
Choose one account, the regions, and optionally names to cover. Try the controls to see which example resources fit. A zone counts as inside its region.
Leave empty to cover the whole region.
Default 30 min · maximum 240 min.
Example data.
Expiry and revocation
Fails closed
A pass covers nothing when it has no regions, has expired or has been revoked. Expiry is checked at the moment of each read. Anything that is not a read is refused.
Example data.
Per request
Autopilot never gets the key
Zaysa holds the credential and decides on each request what Autopilot may see. Every read under the pass is counted. The reason stays in the audit record.
Sends a read request →
Never receives a key.
Holds the credential. Checks the pass per request.
Data or refusal. Every read under the pass is counted.
Example data.
On the Business plan
For when production is on fire
Let Autopilot read a narrow slice to explain the incident. Fixes still go through its normal rules and approvals.
Questions
Frequently asked questions
It can read within the pass to explain an incident. Anything that is not a read is refused. Fixes still go through Autopilot’s normal rules and approvals.
More in Autopilot
See what you run, and what it costs.
Free plan, no card needed.