Ravi Sir's Cyber Security Cards › Interview Cards
Explain least privilege for IAM.
Explain least privilege for IAM. Grant only the actions and resources a task needs, and prefer roles over embedded keys. A developer gets access to one bucket, not AdministratorAccess “for speed”. “Least privilege plus roles on EC2, and I review unused permissions.” Over-broad access means one leake
Read card text
What this card says
Short answer
Grant only the actions and resources a task needs, and prefer roles over embedded keys.
Example
A developer gets access to one bucket, not AdministratorAccess “for speed”.
Say it in the interview
“Least privilege plus roles on EC2, and I review unused permissions.”
Why it matters
Over-broad access means one leaked credential can wreck everything.
Learn more in the lesson: 47.6 Cloud and AWS Security MNC Themes