Operations / 4 MIN READ

Apply least privilege

Least privilege reduces what a compromised identity can do. Apply it to people, services, build jobs, and deployment automation.

1. Describe the access needed

   List the operations each identity needs. Separate read access from write access and development from production.

2. Keep credentials scoped

   Prefer short lived credentials and workload identity when available. Avoid shared accounts and broad permanent tokens.

3. Review what is actually granted

   Review effective permissions and remove unused access. Test changes so essential recovery and deployment paths still work.