https://kimpaper.github.io/en/tags/security/ Recent content in Security on paper.archive https://kimpaper.github.io/images/2026-07-17-daebit-1.jpg https://kimpaper.github.io/images/2026-07-17-daebit-1.jpg Hugo en-US Mon, 20 Jul 2026 00:00:00 +0000 https://kimpaper.github.io/en/2026/07/20/harness-aws-limited-account/ Mon, 20 Jul 2026 00:00:00 +0000 https://kimpaper.github.io/en/2026/07/20/harness-aws-limited-account/ <p>When deploying a SaaS service on AWS and connecting Harness for CI/CD, one of the first questions is <strong>how Harness should access the AWS account</strong>. The easiest option is to create an Access Key and attach <code>AdministratorAccess</code>, but that creates an unnecessarily large blast radius if the credential is ever compromised.</p> <p>This post describes a setup that allows Harness to deploy AWS resources while granting only the permissions it actually needs.</p>