A department placed every employee into a single IAM group with AdministratorAccess. What redesign best aligns with least privilege?
Select an answer to reveal the explanation.
Short Explanation
One giant AdministratorAccess group is like giving every staffer the master key to city hall. Split people into job-function groups — helpdesk, billing readers, builders — and hand each group only the keys their work actually needs.
Full Explanation
Least privilege means granting only the permissions required for a task. A single AdministratorAccess group for all employees vastly exceeds typical needs and increases blast radius if credentials are compromised. Job-function IAM groups with tailored policies are the foundational pattern for scalable, least-privilege access.