City Hall helpdesk staff keep creating IAM users with AdministratorAccess “temporarily.” How should the architect remediate this least-privilege anti-pattern?
Select an answer to reveal the explanation.
Short Explanation
“Temporary admin” has a way of becoming permanent wallpaper. Give helpdesk a read-mostly role for tickets, and a separate break-glass role with MFA and logging when elevation is truly needed. Standing AdministratorAccess for everyone is how small tickets become big incidents.
Full Explanation
Least privilege replaces standing AdministratorAccess with policies matched to helpdesk tasks (often read-only or limited support actions) and a tightly controlled break-glass path for exceptional elevation. Shared admin keys and default AdministratorAccess maximize blast radius. Removing authentication entirely is not a remediation.