HN 표시: Opsy – 에이전트 우선 인프라 관리

hackernews | | 💼 비즈니스
#cli #mcp #opsy #tip #에이전트 #인프라관리
원문 출처: hackernews · Genesis Park에서 요약 및 분석

요약

Opsy는 인공지능(AI) 에이전트에 무분별하게 인프라 접근 권한이 부여되는 보안 리스크를 해결하기 위해 개발된 도구입니다. 이 솔루션은 에이전트와 클라우드 환경 사이에 위치하여, AI가 YAML로 작성한 변경 사항을 최종 승인 없이 실제 프로덕션(prod) 환경에 적용하는 것을 원천 차단합니다. 특히 Claude Code를 포함해 MCP(Model Context Protocol)를 지원하는 도구와 호환되며, 사용자의 승인 절차를 거치도록 함으로써 민감한 자격 증명이 노출되는 것을 막아 인프라를 안전하게 관리합니다.

본문

Opsy is an agent-friendly infrastructure control plane. The opsy CLI exposes the same operator surface that Opsy MCP uses: explicit projects, resources, and changes. npm install -g @opsyhq/opsy Start from clean discovery. Do not assume a remembered target. opsy auth login --token opsy project list opsy resource list --project opsy resource get --project resource list returns root resources first. Add --all for a flat list of every managed resource in the project, or use --parent to walk down the tree. Add --recursive together with --parent when you want the full descendant subtree in one call. Interpolation refs in resource inputs support both direct output fields like ${vpc.id} and indexed array output paths like ${frontend-cert.domainValidationOptions[0].resourceRecordName} . Use --parent on resource create and resource update to organize resources under another resource. In change mutation JSON, use "parent":"" . If you want a folder-like container with no cloud object, create a virtual group resource first and then parent resources under it. Use a draft change when the work should be reviewable or span multiple mutations: opsy change create --project --summary "Create base network" opsy change append --mutations '[...]' opsy change preview opsy change apply Example with a virtual group and explicit parenting: opsy change create --project --summary "Create grouped network" \ --mutations '[{"kind":"create","slug":"network","type":"group"},{"kind":"create","slug":"vpc","type":"aws:ec2/vpc:Vpc","parent":"network","inputs":{"cidrBlock":"10.0.0.0/16"}}]' Use one-off resource mutations when you want a single mutation with an immediate preview. Pass --auto-apply when you want the convenience command to continue into apply: opsy resource create --project --slug vpc --type aws:ec2/vpc:Vpc --inputs '{"cidrBlock":"10.0.0.0/16"}' opsy resource update --project --inputs '{"key":"value"}' opsy resource delete --project opsy resource create --project --slug vpc --type aws:ec2/vpc:Vpc --inputs '{"cidrBlock":"10.0.0.0/16"}' --auto-apply For reparenting, use: opsy resource update --project --parent --inputs '{}' Use the product surface itself as the guide: opsy --help opsy project list --help opsy change create --help Resource inputs use Pulumi property names. Reach for schema inspection only when the exact type token, field names, nested shape, or required references are unclear. opsy schema list --provider aws --query cloudfront opsy schema get aws:cloudfront/distribution:Distribution opsy schema get aws:cloudfront/distribution:Distribution --detailed schema get is compact by default to keep payloads small. Use --detailed only when the compact map is insufficient. Schema responses come from Pulumi/provider metadata, not curated Opsy examples. The CLI accepts a personal access token through: opsy auth login --token --token OPSY_TOKEN The API base URL can be configured with --api-url or OPSY_API_URL . The default is https://api.opsy.sh . The skills/opsy directory in the public mirror is installable in agent clients that support local skills. It documents when to use Opsy over MCP or CLI flows.

Genesis Park 편집팀이 AI를 활용하여 작성한 분석입니다. 원문은 출처 링크를 통해 확인할 수 있습니다.

공유

관련 저널 읽기

전체 보기 →