Comparison
Least privilege for toolsvsPrinciple of least privilege
Least privilege for tools
you give the agent read-only tools by default and a scoped credential, because whatever its tools can reach is the blast radius.
Granting the minimum capability each task needs: read-only tools by default, scoped credentials, no broad filesystem or network access without cause. The blast radius of a compromised or confused agent equals whatever its tools can reach.
Full entry →Principle of least privilege
you give the service a database user that can only read the two tables it needs, rather than the one that can drop everything.
Granting only the permissions needed for the task, for as long as they are needed. It does not prevent compromise; it bounds what a compromise reaches. The common violations are boring and universal: an admin credential in CI, a service account with wildcard permissions, a token that never expires.
Full entry →