Principle of Least Privilege

Summary

Granting only the minimum permissions needed for a task, never broad access 'just in case' — a foundational security principle that limits the damage of a compromised credential or a mistake.

• 1Audit a hypothetical IAM policy and identify any overly broad permissions.
• 2Practice writing a least-privilege policy scoped to a specific task, not a whole service.
• 3Learn why 'admin access for everyone' is a common but serious security anti-pattern.