Introducing ClickOps Sentinel: AI Context for AWS Console Changes
Even in shops that live by infrastructure as code, someone eventually opens the AWS Console and clicks. A quick fix during an incident, a security group tweak, a “temporary” instance. That is ClickOps, and it is how drift and silent risk creep into an otherwise clean account. I built ClickOps Sentinel at zoph.io to catch those moments and, more importantly, to tell me what they actually mean. Detecting console changes Detection relies on the CloudTrail sessionCredentialFromConsole flag, which AWS sets server-side for every API call made with console session credentials. No user-agent guessing, no CloudTrail trail to create, no S3 log parsing. ...