# Audited least privilege

DevFeed: [Audited least privilege](<https://devfeed.tech/articles/audited-least-privilege-12893.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/audited-least-privilege>)

Published: 2024-05-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [IAM](<https://devfeed.tech/topics/iam.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [identity and access management](<https://devfeed.tech/topics/identity-and-access-management.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [SIEM, Security, Observability](<https://devfeed.tech/topics/siem-security-observability.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [audit](<https://devfeed.tech/tags/audit.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [defense-in-depth](<https://devfeed.tech/tags/defense-in-depth.md>), [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [identity-and-access-management](<https://devfeed.tech/tags/identity-and-access-management.md>), [identity-management](<https://devfeed.tech/tags/identity-management.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [logs](<https://devfeed.tech/tags/logs.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [trust](<https://devfeed.tech/tags/trust.md>)

## AI overview

The article presents audited least privilege as a cloud security model that complements fine-grained IAM grants with fine-grained IAM audit log policies. It emphasizes minimizing access by level, scope, and duration, then monitoring resource access to verify that only expected identities use provisioned resources.

## Source excerpt

Strengthen your software supply chain security with audited least privilege. Learn how Chainguard's approach minimizes risk and enhances trust.