Glossary term
What is least privilege (Principle of least privilege)?
least privilege stands for Principle of least privilege.
In DevOps
Give an identity the minimum access needed to do its job and nothing more, so a mistake or a leak stays small.
Learn it properly · DevOpsLesson 5: AWS Account and IAM: Identity and AccessWho is allowed to do what in your AWS account. Users, groups, policies, roles and least privilege — the lesson that protects you from the expensive mistakes, and it costs nothing to set up.In System Design
Give only the minimum permissions needed. Example: The app's DB user can't drop tables.
Learn it properly · System DesignLesson 49: Authentication vs Authorization: Sessions, Cookies & JWTEvery endpoint checked “is the user logged in?” — and changing one number in the URL showed another customer's invoice. Authentication vs authorization, storing passwords, MFA and passkeys, sessions vs JWTs (with a live token to tamper with), and RBAC, ABAC and ReBAC.In AI Engineering
Give a component only the access it needs for its job, and nothing more.
Learn it properly · AI EngineeringLesson 1: Prompt Injection and Safe Tool Use for AgentsDirect and indirect injection, a mock agent leaking private notes, and a policy layer that blocks the leak.In Security for Developers
Give every user, program and key only the permissions its job needs, so the damage stays small if it is stolen or buggy.
Learn it properly · Security for DevelopersLesson 0: The Security Mindset: Threats, Attack Surface and the OWASP Top 10How attackers think, what to protect, threat modelling in four questions, defence in depth, least privilege, and a map of the OWASP Top 10 so you know where each lesson fits.