Give it all the permissions
and everything works — today.
Then one thing gets compromised
and it can reach everything.
Least privilege is selfish, in a good way.
It's you protecting you.
Grant only what the job needs.
Nothing extra. Nothing "just in case."
The blast radius you prevent
is the one you won't have to explain.
– Serguey Asael Shinder
Top comments (0)