AWS IAM Permission Boundaries
Limiting the Privileges of IAM Entities
Hello, World! AWS developers usually only need access to a handful of AWS services to fulfill their project requirements. For example, a web app developer might only need access to AWS IAM, cloudwatch, S3, EC2, and CodeCommit. Granting access to other services beyond whats necessary for the scope of a project, introduces permission-related risks…