
IDENTITY AND ACCESS MANAGEMENT
Secure Go Code using the Principle of Least Privilege
Principle of Least Privilege in Software Engineering means granting only the bare minimum permissions necessary for a process/module/user or any other entity to perform the required task. For example in Kubernetes, assigning only the necessary minimum privileges to a pod’s service account to perform it’s functions. If a Pod needs only read access to a specific config map in a namespace, then following the principle of least privilege means creating a role and rolebinding on that namespace with access to only that specific config map and not providing any other permissions.