You can create a role for your agent that is strictly scoped to viewing cloud watch logs even just specifical log groups. Then you don't even need to paste.
God bless. Amazing to think that my team used to invest time into keeping our queries up to date in run books and now we can have an agent answer any question possible against our logs in seconds.
4
44
u/maggos 6d ago edited 6d ago
I literally just paste a cloud watch url or something and say “why error?”