IAM & Least Privilege

Summary

Identity and Access Management controls who can do what in a system — the principle of least privilege means granting only the minimum permissions needed, never broad access 'just in case'.

• 1Audit a hypothetical IAM policy and identify any overly broad permissions.
• 2Practice writing a least-privilege IAM policy scoped to a specific task.
• 3Learn why 'admin access for everyone' is a common but serious security anti-pattern.