IAM Least Privilege in Practice

Start with no permissions, grant only the actions a role needs, scope resources by ARN, prefer roles over long-lived access keys, and review with IAM Access Analyzer.