Agent Safety

AI agents are powerful, but giving one full access to your production infrastructure is risky. Tapitalee provides several mechanisms to limit what an agent can see and do, so agents can be deployed with less fear of disruption or leakage of sensitive data.

Limited Agent Tokens

Tapitalee lets you create agent tokens with limited ability to access individual apps. A token can be scoped to a single app and restricted to:

• Read-only access — the agent can inspect processes, deploys, logs, and configuration, but cannot change anything.
• A limited set of capabilities — for example, allow deploying and running tasks, but deny the ability to read secret variables or change app settings.

This means an agent can be given exactly the access it needs for its job — a debugging agent might get read-only access without secrets, while a deployment agent gets deploy capability but nothing else.

See Access Control for full details on roles, permissions, and tokens.

Read-Only Add-On Sharing

For stronger isolation, you can set up a second app and share the primary app’s add-ons with it in read-only mode. Read-only sharing works for the following add-ons:

• Redis (ElastiCache)
• RDS
• EFS
• S3

The agent works against the second app, where it can freely inspect data and run workloads, but the shared add-ons are wired up so it cannot modify or delete the underlying data. Even if the agent misbehaves, your primary app’s data is safe.

See Add-On Management for how add-on sharing works.

Immutable Backups

We also recommend adding the Backups add-on with immutable backups configured. Immutable backups cannot be deleted by anyone — not even the AWS account owner — until their retention period expires.

This is your last line of defense: even in the worst case where an agent (or anyone else) gains destructive access, your backups remain intact and recoverable.

Recommended Setup

For running AI agents against production systems:

1. Create a dedicated agent token scoped to a single app, with read-only access or a minimal capability set, and no access to secret variables.
2. If the agent needs to work with production data, create a second app and share add-ons with it in read-only mode rather than giving the agent access to the primary app.
3. Enable the Backups add-on with immutable backups on any app holding important data.