Least Privilege
Problem
A monitoring engineer needs to read production logs.
Giving them full production administrator rights certainly works.
But if their account is compromised, the attacker can now modify everything.
Solution — Least Privilege
Grant only the permissions required for the task.
Need: read logs
Read logs ✓
Delete database ✗
Change network ✗
Core idea: minimize authority so mistakes and compromises have limited impact.