Reviewed by Aditya Kumar · Last reviewed 2026-03-24
Principles: (1) Least privilege. (2) Roles over users for services. (3) SCPs for org; IAM for accounts. (4) Conditions (MFA, IP, tags). (5) Rotate keys; prefer roles. Best practice: Fine-grained policies; MFA for humans; permission boundaries; CloudTrail and Access Analyzer;...
Principles: (1) Least privilege. (2) Roles over users for services. (3) SCPs for org; IAM for accounts. (4) Conditions (MFA, IP, tags). (5) Rotate keys; prefer roles. Best practice: Fine-grained policies; MFA for humans; permission boundaries; CloudTrail and Access Analyzer; periodic review.
Red Flag: Overly broad policies. Pro-Move: 'We use permission boundaries; every role has least-privilege; quarterly review—Access Analyzer found 3 unused.'
According to DataEngPrep.tech, this is one of the most frequently asked Cloud/Tools interview questions, reported at 1 company. DataEngPrep.tech maintains an editor-reviewed database of 1,863 data engineering interview questions across 7 categories.