Reducing the attack surface with POLP
Often, we find ourselves in a situation where, to speed up the development of our application, we grant permissions without understanding what we are really doing, just to make the code work. The problem with this strategy is that by assigning more permissions than the application needs to perform its functions, we increase its attack surface. This increases the possibility of vulnerabilities arising in our application, with the risk that these will be exploited by malicious actors. This is why POLP exists, and we will look at this in detail next.
POLP
The idea behind POLP is that each application must have the minimum permissions it needs in order to operate, so as to prevent an application from performing actions for which it was not created.
In order to comply with this principle, it is necessary to identify in the application design phase the dependencies of the services to be consumed and the actions that they will perform on these...