Poisoned Pipeline / Mitigations / M1770

M1770

Implement least privilege principle for serverless workloads

Serverless functions should be granted only the permissions they require to perform their specific task, and no more. By implementing the principle of least privilege, organizations can reduce the risk of an attacker gaining access to sensitive resources.

Applies to

• T0177 Misconfiguration of serverless workloads

References

• https://www.paloaltonetworks.com/cyberpedia/what-is-the-principle-of-least-privilege