IAM

I’ve walked into more than one new consulting gig to find the AWS account is a minefield of over-permissioned IAM users. It usually starts with a familiar, stomach-dropping story. A junior engineer, armed with PowerUserAccess, tries to terminate a test instance and accidentally nukes a production database because of a typo in a script. Or…