AI SECURITY • 334 / 397
Understand how untrusted text, tools and autonomy create new attack paths.
Least Privilege
Least privilege gives an identity only the permissions required for its task.
Think of it like
Think of Least Privilege as an input-trust or privilege problem: words can influence software decisions, so boundaries must be explicit.
Real life
Email, documents and web pages can become hostile inputs to AI systems through attacks involving Least Privilege.
SRE lens
An incident agent that reads logs does not need IAM user-creation permissions.
Remember thisLeast privilege gives an identity only the permissions required for its task.