Quick Reference: The PADRE IAM Check
Recall the PADRE check for cloud IAM least privilege.
PADRE What does PADRE check in a cloud IAM review? Five fields that make access reviewable. It is temporary, so broad access is fine. Your line Temporary still needs owner, expiry, and logs. Let us scope it to the migration resource and set removal now. Accepting “temporary” without an expiry task. It keeps speed while preventing temporary privilege from becoming permanent. Standing admin vs just-in-time role Use JIT for unusual production elevation. What is the fastest smell in an IAM policy? Wildcard action plus wildcard resource without a condition or expiry. The smell is not proof of danger alone, but…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in