Ravi Sir's Cards › AWS
Review AI suggestions
This revision card explains Review AI suggestions. It starts from the need that blindly accepting AI code can ship insecure IAM or hardcoded secrets. It describes treat Q like a junior pair — useful drafts, you own security review, tests, and secrets. The how-to section notes scan for * IAM actions, public buckets, and secrets in plaintext before merge. An example on the card is q suggests AdministratorAccess; you replace it with s3:PutObject on one bucket ARN.
Read card text
What this card says
Why do we need it?
Blindly accepting AI code can ship insecure IAM or hardcoded secrets.
What is it?
Treat Q like a junior pair: useful drafts, you own security review, tests, and secrets.
human review
How to do it
Scan for * IAM actions, public buckets, and secrets in plaintext before merge.
Example
Q suggests AdministratorAccess; you replace it with s3:PutObject on one bucket ARN.