Skip to main content

Contextualized insights

You can grant the AI assistant access to individual AWS accounts or GCP projects within your AWS or GCP organizations. This provides a secure way to generate contextualized and granular insights for specific accounts or projects, without exposing data from your entire organization. The AI assistant can investigate issues and provide more tailored, precise, and relevant answers for your individual accounts and projects. For example, the AI assistant can answer questions like, What is the CPU utilization of i-0123456789abcdef0 for the last 24 hours, List all resources that are not tagged with a Project tag, and Which services are contributing to my bill this quarter?

Note

When creating expert inquiries for specific accounts or projects, the AI assistant is only able to retrieve information from accounts or projects for which you have granted the AI assistant access and that are enabled. This direct access enables more efficient troubleshooting and resolution. Without this access, the AI assistant will guide you through the process of manually retrieving the information.

Required permissions​

When granting the AI assistant access to your accounts or projects:

  • Your DoiT account must have the Manage settings permission.

  • The platform is granted read-only access to your AWS accounts or GCP projects.

Grant the AI assistant access to AWS accounts​

Follow the steps below to first enable your accounts with the AI assistant, and then grant the AI assistant access.

  1. Sign in to the DoiT console.

  2. Select the AI assistant icon (

    ) from the top navigation bar or bottom right-hand corner.

  3. Select the plus icon (＋) and select AWS accounts.

    A list of the available AWS accounts in your organization is displayed. You can see the accounts that are already enabled and which are pending enablement.

    The AWS accounts that are available

  4. Select Grant Access next to an account to which you want to grant the AI assistant access.

  5. Select I have read and agree to the terms above and then select Accept to agree to our terms and conditions.

  6. If a CloudFormation stack has not been applied, you'll be taken to the AWS console to create one from a template. The stack is required to enable Cloud Intelligence access to your AWS accounts. The stack only needs to be applied once. Consequently, you will not see this option if the CloudFormation stack was previously applied when connecting your AWS account or when integrating a new AWS account.

    After the stack is applied, the permissions are set on your AWS account, but the AI assistant does not have access until you enable the account with the AI assistant.

  7. Use the toggle buttons to enable the accounts.

  8. Check the boxes next to all the accounts to which you want to grant the AI assistant access.

    Enable AWS account in the AI assistant

  9. Select Update context.

    The AI assistant will now answer your questions within the context of the AWS accounts. You can remove an account at anytime by repeating the same steps.

Grant the AI assistant access to GCP projects​

Follow the steps below to grant the AI assistant access to your GCP projects.

  1. Sign in to the DoiT console.

  2. Select the AI assistant icon (

    ) from the top navigation bar or bottom right-hand corner.

  3. Select the plus icon (＋) and select Google Cloud projects.

    A list of the available Google Cloud projects in your organization is displayed. Projects with access do not display the Grant Access button.

    The GCP projects that are available

    If any projects have a status of Partial, then the projects do not have the AI assistant view-only permission. While the AI assistant can access some resources without this permission, we recommend granting this access to ensure more tailored, precise and relevant answers.

  4. Select Grant Access next to a project to which you want to grant the AI assistant access.

    If any of the Google Cloud organizations or projects do not have the AI assistant view-only permission, the AI assistant prompts you to add that permission.

  5. In gcloud organizations list, copy the provided code block.

  6. Select Open Google Cloud Shell.

  7. Paste the code and run the command. This retrieves a list of your Google Cloud organizations and their IDs.

  8. Go back to the DoiT console.

  9. In Update Custom Role:, copy the provided code block.

  10. Go back to Google Cloud Shell. Paste the code, replacing ORGANIZATION ID with the organization ID of the organization for which you are adding the required permissions and run the command.

  11. Go back to the DoiT console and select Done.

  12. Check the boxes next to all the projects to which you want to grant the AI assistant access.

  13. Select Update context.

    The AI assistant will now answer your questions within the context of the Google Cloud projects. You can remove a project at anytime by repeating the same steps.

Last updated on