A new city permit API needs IAM roles that separate read-only auditors, deployment pipelines, and runtime application tasks. Which design best follows least privilege?
Select an answer to reveal the explanation.
Short Explanation
Auditors peek, pipelines ship, the app runs—three badges, three jobs. One shared god-role is how a read-only visit turns into a production remodel.
Full Explanation
Least privilege for a new permit API means separate IAM roles (and policies) for auditors, deployment principals, and runtime tasks, each limited to required actions. Shared AdministratorAccess, embedded root-equivalent keys, and destructive rights for auditors violate separation of duties and least privilege.