Asked about The cloud you actually need

How do you manage permissions for a service?

An answer that works

A dedicated identity per service with least privilege: exactly the resources it needs and nothing more. Broad wildcard grants are convenient and turn a small compromise into a large one.

Reading an answer is not being able to give one. The section that teaches this is The cloud you actually need, 7 hours of Cloud fundamentals.

Learn this properly

Also asked about Cloud fundamentals

How do you handle secrets in production?How do you avoid a surprise cloud bill on an AI project?Walk me through deploying a containerised AI API to production.