Context: I am building on azure, have a web app + recurring jobs I use a db, container, container jobs, container registory, azure bucket i have productions credentials stored in a .env key which is in .gitignore. Currently, I run notebooks with production connected (I am at a very early stage with my app) Problem I use azure cli to control all the resources on azure cloud which makes it super easy to do everything. I, and hence the models, have full access to the azure cloud via cli. The models also run read db queries from production database for reading data to help in debugging. They don’t directly see the credentials but access it by writing test python code, which reads from the .env, use the credentials and runs the queries. It also has access to my objects storage bucket. I am currently accepting the risk because I am more concerned about the speed of execution and am being careful whenever it has risks of doing damage. But I don’t have any hardened security policy in place. I wanted to know what are the safety practices that you follow to mitigate risks posed by errors from llms? submitted by /u/slow-fast-person
Originally posted by u/slow-fast-person on r/ClaudeCode
You must log in or # to comment.