💻 Tech
One of the best practices in security is the concept of least privilege. In AWS, if you’re going to create a user specifically for AWS CLI, you can apply that principle by creating an IAM user and giving it access to assume a role. The role is where the permissions are defined. Now in AWS CLI, the user can assume the role and execute the commands with the permissions defined in the role.