HOW LEAST PRIVILEGE LEADS TO A FALSE SENSE OF SECURITY

Summary from the TLDR InfoSec newsletter

A post that provides a deep dive into the concept of Least Privilege as applied to AWS IAM. After providing some background and worked examples on how to determine the effective policy of an AWS principal, the post elaborates on why striving for Least Privilege may not be sufficient or productive in all cases.