SecurityDevOps/Cloud
Principle of Least Privilege
Also written as Least Privilege, PoLP
Giving every person and system the minimum access needed to do their job, and nothing more — so a compromised account does limited damage.
Think of it like
Giving the cleaner a key to the office but not the safe.
Junior or senior?
Junior sounds like
States the principle.
Senior sounds like
Can describe access they took away, and how they handled the people who complained — that's the hard part.
Ask them
“Tell me about permissions you removed. How did you handle the pushback?”