Linux Capabilities: Review the Authority the Running Service Actually Has
Review Linux capability breadth, process sets, file attributes, execution transitions, and namespaces before claiming least privilege.
Hackbitez journal
Tag: Least privilege
IAM Access Analyzer: Match Findings to the Permission Question
Review external, internal, and unused IAM access with explicit scope, business ownership, careful reductions, and workload verification.
GitHub Actions GITHUB_TOKEN: Match Automation Authority to the Job
Scope GITHUB_TOKEN permissions to each job, account for implicit token access, and separate verification from privileged publication.