A CI pipeline role may deploy one SAM stack in the city’s test account but must not create IAM users. How should that deploy principal be scoped?
Select an answer to reveal the explanation.
Short Explanation
Hand the pipeline a work order for one SAM stack, not the keys to create contractor IAM users. Least privilege for deploy roles means CloudFormation/SAM powers without identity-admin powers. Root keys in CI are a citywide incident waiting to happen.
Full Explanation
Deploy-time IAM roles should be scoped to the services and actions required for the application stack, not AdministratorAccess. Creating IAM users is outside typical application deploy needs and outside the DVA target candidate’s core admin responsibilities. Root credentials in pipelines are unsafe. Least privilege keeps CI from becoming an identity-administration backdoor.