Least Privilege

5 items tagged with "least-privilege"

Filter by type:

Best Practices1

Principle of Least Privilege

A security principle that grants every user, service, and process only the minimum access required to perform its function, and no more.

Anti-Patterns1

Anti-Pattern

Wildcard IAM Permissions

Granting broad cloud permissions with wildcards like Action:* or Resource:*, violating least privilege and widening the blast radius of any compromise.

Tutorials2

Tutorial

How to set up RBAC in Kubernetes with Roles and ServiceAccounts

Grant least-privilege access to users and workloads using Roles, RoleBindings, and ServiceAccounts.

Tutorial

How to write least-privilege IAM roles on AWS

Create tightly scoped AWS IAM roles and policies that grant only the permissions a workload actually needs.

Reference Architectures1

Reference Architecture

Zero-Trust Network Architecture on AWS

Identity-aware, least-privilege access design that authenticates and authorizes every request regardless of network location.