Question

A network automation team wants to use a cloud-hosted commercial LLM code assistant to help write Python scripts. During review, the security team flags that engineers routinely paste live device outputs (including running configs with SNMP community strings and TACACS keys) into the assistant's chat window to get debugging help. The security team must recommend a mitigation that preserves the productivity benefit of AI assistance while addressing the data privacy risk. Which mitigation BEST addresses the core concern?

Accepted Answer

Require engineers to sanitize/redact secrets and identifying data from any snippet before submitting it, and adopt a self-hosted or enterprise LLM offering with a contractual no-training/no-retention data policy

Answer

Enable HTTPS/TLS for all traffic to the LLM provider so that pasted configurations are encrypted in transit

Answer

Rotate all SNMP community strings and TACACS keys on a weekly schedule so leaked credentials expire quickly

Answer

Require engineers to enable multi-factor authentication on their accounts with the LLM provider