From the course: AWS Certified Cloud Practitioner (CLF-C02) Cert Prep
Unlock this course with a free trial
Join today to access over 25,100 courses taught by industry experts.
Principle of least privilege
From the course: AWS Certified Cloud Practitioner (CLF-C02) Cert Prep
Principle of least privilege
- [Instructor] Principle of least privilege. Who can access what? When you start a new job, you get some accounts to log in. It could be your not-so-new computer with someone else's coffee stains on the keys, or your corporate email account that has 50 emails waiting for you already. Or it could be your company-shared network drive on the server where your team and your predecessors have been keeping documents that everyone needs to access. Say you work in a sales department. You should have access only to resources and information that you require to do your job. That could be the client list for your team or deck templates for slideshows you will now be creating to present to potential clients. Or even the products you're selling. However, you will not expect and should not have access to resources like pending legal cases being handled by the legal department, the not-yet-released product mockups being developed by your dev teams, or list of personnel reshuffling that the HR…