Sort IAM Smells From Valid Patterns

Sort each IAM pattern by its access-risk posture. Strong pattern Risky smell Emergency-only CI deploy role limited to tagged staging resources User group with AdministratorAccess and no review date Break-glass role with alerting and two-hour session Service account with long-lived key unused for 190 days Read role scoped to one reporting bucket prefix Shared admin login stored in a password manager Privileged incident role requiring ticket approval Function role can read only one named secret sort-buckets score-chips marigold-feedback

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in