Least privilege
Grant the smallest permission that works.
What you will be able to do
- Grant at resource scope.
- Review unused permissions.
- Separate read and write roles.
In plain English
Grant the smallest permission that works.
- Grant at resource scope.
- Review unused permissions.
- Separate read and write roles.
bad: s3:* on *
good: s3:GetObject on arn:aws:s3:::assets/*Your turn
EasyExplain it back
Answer from memory: What does least privilege mean?
TEXT · starter
Your answer…Check your understanding before moving on.
Knowledge checkQuestion 1
What does least privilege mean?
Select an answer to continue
Study tools
Make it yours.
Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.
Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign inFinished reading?
Lock in what you just learned.
0%
Mark this lesson complete to save your place and move one step closer to the certificate.