Giving every user full AWS permissions is convenient in the same way that giving every employee the company safe key is convenient.
Until it is not.
AWS Identity and Access Management helps control who can do what.
Follow the principle of least privilege:
Give people and systems only the permissions required to perform their jobs.
Also protect the root account with MFA and avoid using it for daily work.
“Access denied” can be frustrating. “Entire production environment deleted” is usually worse.
Top comments (0)