Writing an IAM Policy That's Actually Least Privilege

I wrote the IAM policy for my solar agent myself, on the first try, thinking I had done it right. I had not, entirely. The agent behind the last article does two things: it reads one secret from Secre