--- title: Day 8/30: Not everyone needs Administrator Access description: A brief reminder about AWS IAM best practices, emphasizing the principle of least privilege — granting users and systems only the permissions they need. Also... canonical: https://daily.dev/posts/day-8-30-not-everyone-needs-administrator-access-paw9wink2 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Day 8/30: Not everyone needs Administrator Access | daily.dev og:description: A brief reminder about AWS IAM best practices, emphasizing the principle of least privilege — granting users and systems only the permissions they need. Also... og:url: https://daily.dev/posts/day-8-30-not-everyone-needs-administrator-access-paw9wink2 og:image: https://api.daily.dev/og/posts/pAw9WINK2.png og:image:alt: Day 8/30: Not everyone needs Administrator Access og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Day 8/30: Not everyone needs Administrator Access **[Ezile Mdodana](https://daily.dev/sources/7vb9selrkhohgnzepmfvq)** · [@ezilemdodana](https://daily.dev/ezilemdodana) · 1 min read · 5 upvotes · 1 comments ## Summary A brief reminder about AWS IAM best practices, emphasizing the principle of least privilege — granting users and systems only the permissions they need. Also highlights protecting the root account with MFA and avoiding its use for daily tasks. Uses a simple analogy to illustrate why blanket Administrator access is risky. ## Content Giving every user full AWS permissions is convenient in the same way that giving every employee the company safe key is convenient. Until it is not. AWS Identity and Access Management helps control who can do what. Follow the principle of least privilege: Give people and systems only the permissions required to perform their jobs. Also protect the root account with MFA and avoid using it for daily work. “Access denied” can be frustrating. “Entire production environment deleted” is usually worse.  #AWSWithoutTheFluff #AWSIAM #CloudSecurity ## Community discussion Top comments from developers on daily.dev. **@amitgajare** · 0 upvotes > Run as **Administrator** ## Similar posts on daily.dev - [Learn Cloud Security Fundamentals in AWS – A Guide for Beginners](https://daily.dev/posts/learn-cloud-security-fundamentals-in-aws-a-guide-for-beginners-p744hpjg5) · freeCodeCamp · 2 upvotes · 0 comments - [Enterprises still aren’t getting IAM right](https://daily.dev/posts/enterprises-still-aren-t-getting-iam-right-gtsss02x9) · CSO Online · 1 upvotes · 0 comments - [Privilege Hygiene: Least Privilege Best Practices Guide](https://daily.dev/posts/privilege-hygiene-least-privilege-best-practices-guide-pegfoizoi) · Huntress Blog · 0 upvotes · 0 comments - [Cloud Least Privilege: Principles, Best Practices & How to Enforce It](https://daily.dev/posts/cloud-least-privilege-principles-best-practices-how-to-enforce-it-wdodjsukp) · Orca Security Blog · 0 upvotes · 0 comments - [Why Developers Write s3:\* Instead of Least Privilege Policies](https://daily.dev/posts/why-developers-write-s3-instead-of-least-privilege-policies-kasvctbst) · AWS Fundamentals · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#aws](https://daily.dev/tags/aws), [#aws-iam](https://daily.dev/tags/aws-iam) [View this post on daily.dev](https://daily.dev/posts/day-8-30-not-everyone-needs-administrator-access-paw9wink2) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/day-8-30-not-everyone-needs-administrator-access-paw9wink2","headline":"Day 8/30: Not everyone needs Administrator Access","text":"A brief reminder about AWS IAM best practices, emphasizing the principle of least privilege — granting users and systems only the permissions they need. Also highlights protecting the root account with MFA and avoiding its use for daily tasks. Uses a simple analogy to illustrate why blanket Administrator access is risky.","url":"https://daily.dev/posts/day-8-30-not-everyone-needs-administrator-access-paw9wink2","datePublished":"2026-07-30T06:15:43.305Z","dateModified":"2026-09-13T21:19:19.668Z","author":{"@type":"Person","name":"Ezile Mdodana","url":"https://daily.dev/ezilemdodana","image":"https://media.daily.dev/image/upload/s--1OI8gwnO--/f_auto/v1771923757/avatars/avatar_7vB9SeLRKhOHGnzEpmFvQ?_a=BAMAMiiu0","description":"Software Project Lead sharing practical insights on NestJS, Angular, AWS and scalable systems.","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":8430}},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":5},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"comment":[{"@type":"Comment","text":"Run as Administrator","datePublished":"2026-07-30T06:25:06.886Z","url":"https://daily.dev/posts/pAw9WINK2#c-WMdJ3xMQK","author":{"@type":"Person","name":"Amit Gajare","url":"https://daily.dev/amitgajare","image":"https://media.daily.dev/image/upload/s--7lr6XGRA--/f_auto/v1735367756/avatars/avatar_UU1stgGJldM9pQP0QluF0"}}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/7vb9selrkhohgnzepmfvq","name":"Ezile Mdodana"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Ezile Mdodana","item":"https://daily.dev/sources/7vb9selrkhohgnzepmfvq"},{"@type":"ListItem","position":3,"name":"Day 8/30: Not everyone needs Administrator Access"}]} ```