Answer: Users should be granted permission to access only resources they need to do their assigned job

## Explanation The principle of least privilege means giving users only the minimum permissions necessary to perform their specific job functions. **Why Option B is correct:** - This directly implements the principle of least privilege by granting access only to resources needed for assigned tasks - It minimizes security risks by reducing the attack surface - It prevents accidental or intentional misuse of unnecessary privileges **Why other options are incorrect:** - **Option A**: Granting access to all AWS services violates the principle by providing excessive permissions - **Option C**: While documentation is good practice, it doesn't inherently implement the principle of least privilege - **Option D**: Providing extra access "just in case" directly contradicts the principle of least privilege **Key Takeaway:** The principle of least privilege is a fundamental security concept that helps reduce security risks by limiting user permissions to only what is absolutely necessary for their specific role.

Author: Ritesh Yadav