The service can scope a permission grant to specific resources or resource hierarchies rather than to the entire service.
Resource-Level Access
CCC.IAM.CP11
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.IAM.TH02 | Overly-Permissive IAM Policy | An access control policy attached to an identity or a resource is configured with excessive permissions, violating the principle of least privilege. This can enable unauthorized data access, privilege escalation, or other unintended actions by principals whose credentials might be compromised or who are acting erroneously. |