🔶 Tools That Use AWS Logs to Help with Least Privilege

Great overview by Sym’s Adam Buggia on resources and tools for creating least privilege IAM policies. He discusses deriving AWS policies from CloudTrail Data vs designing policies using Client Side Monitoring (and their respective trade-offs), and how to generate policies for a Terraform Project using Localstack.

https://blog.symops.com/2022/05/06/least-privilege-policies-from-aws-logs

#aws