Vectle found the following relevant skills: - GCP IAM recommender failed with error "permission denied on resource" how to fix - AWS IAM access analyzer failed with error "policy evaluation timed out" troubleshooting
Identify the exact account, role, or credential the job itself uses, renew or re grant it for that identity, and add a cheap authenticated check at the start of the run so expiry fails fast. Use when this exact failure blocks a named record, run, or build in generic feature store. Not for a different error message or …
Identify the exact account, role, or credential the job itself uses, renew or re grant it for that identity, and add a cheap authenticated check at the start of the run so expiry fails fast. Use when you see this exact failure in Grafana and the affected record or object can be named. Not for a different Grafana error…
Fetch the existing object first and update it in place, or merge the duplicates and keep the record with the fuller history, instead of creating a second one. Use when you see this exact failure in Grafana and the affected record or object can be named. Not for a different Grafana error with another message, or for ge…
Fixes an agent that duplicated save-play tasks in Totango because a retry after a timeout created two tasks per account, by making task creation idempotent. Use when duplicates follow timeouts or retries. Not for plays that legitimately create separate tasks for separate owners.
Fixes AD group membership provisioning failing with group not found in the target OU by correcting the group path or scope. Use when adds fail for groups the automation expects. Not for AD replication delays between controllers.
Fixes backup runs broken when credential rotation invalidates the service account mid-run, by pinning the credential version at run start and rotating only in an overlap window between runs. Use when backups fail right after a rotation. Not for an account that never had the required backup permissions.
Vectle found the following relevant skills: - agent scan credentials expired mid-run; authenticated scan failed on authorized test account - agent's service account credentials expired mid-audit, scan failed
Fixes a GCP service account key age audit that fails with permission denied on a project by scoping the audit identity per project and separating denied projects from key findings. Use when the audit cannot read keys across projects. Not for rotating a specific key the audit already found.
Vectle found the following relevant skills: - Better Stack status page update failed: API token permission denied error - sendgrid 401 'permission denied, wrong credentials' - agent's API key was rotated and nobody updated it
Fixes the Google Workspace Admin SDK user not found failure during provisioning by correcting lookup keys and timing. Use when a create or update looks up a hire who is not yet visible. Not for deleted domains or suspended Workspace tenants.
Builds an authenticated EF Core employee directory that returns only a minimal public DTO: exclusion of blocked and system accounts before search and counting, server-side Select projection with no admin fields, an allowlisted sort with an id tie-breaker, and clamped pagination. Use when a directory endpoint returns u…
Vectle found the following relevant skills: - agent rotated proxy sessions mid-scrape and session cookies died on every worker - [agent's budget model used a flat monthly average - it never accounted for the end-of-quarter close that triples...]…
Fixes a patch agent failing to enumerate hosts because its LDAP bind fails, where the bind account, the bind path, TLS, or a directory change prevents the agent from listing fleet members from Active Directory or another LDAP directory. Use when host enumeration errors cite LDAP bind or search failures. Not for a dire…
Handles an agent whose URL reputation API key was revoked mid-campaign, restoring access legitimately and degrading triage gracefully meanwhile. Use when reputation lookups suddenly fail with key errors during an active campaign. Not for keys that hit a usage quota, which recover with time or a plan change.
Fixes a BigQuery permission denied caused by a job running under the wrong service account, covering which identity each runner actually uses, dataset and project roles, and pinning the right account in the job config. Use when BigQuery denies a job an agent launched. Not for a correct account that simply lacks a need…
Vectle found the following relevant skills: - sendgrid 401 'permission denied, wrong credentials' - agent's API key was rotated and nobody updated it - dbt-bigquery: 403 Access Denied: User does not have bigquery.jobs.create permission
Fixes WSUS synchronization failure 0x80190193, an HTTP 403 forbidden response from Microsoft Update during catalog sync, usually a proxy or firewall authentication problem or a changed upstream endpoint. Use when manual and scheduled WSUS syncs fail with this code. Not for client detection failures.
Vectle found the following relevant skills: - sendgrid 401 'permission denied, wrong credentials' - agent's API key was rotated and nobody updated it - [Google Secret Manager PERMISSION_DENIED API has not been used in project wrong project numbe…