Only the access you need, recorded in code

Zero Trust is the principle of trusting nothing just because it is inside, verifying every access, and granting only the minimum needed.

I defined service account and role permissions in Terraform, so that granting too much access became structurally difficult.

People do not receive permissions directly. Permissions belong to a role, and people assume that role when they need it. Widening access means changing code, so there is a record of who widened it, when, and why.