Foundation glossary/Principles

Least Privilege

Companion card for the Foundation course — study the related lesson for full progress.

Simple explanation

Only the access needed for the job.

Technical explanation

Minimize permissions of users, services, tokens.

Real-life scenario

Intern gets CRM read-only — not Cashfree full admin.

Security relevance

Limits blast radius when credentials or tokens leak.

Practical example

CI gets s3:GetObject on one prefix, not s3:*.

Grant only what the task requires — then revoke.

Mini quiz

An intern with full payment-gateway admin violates:

Related lesson

No direct lesson slug yet — use the Foundation course syllabus or roadmap level security-fundamentals.