# SEC03: How do you manage permissions for people and machines?

## References

- [AWS SEC03](https://docs.aws.amazon.com/wellarchitected/latest/framework/sec-03.html)

## Date

2025-11-27

## Focus Area

Identity and Access Management

## Tổng quan

SEC03 tập trung vào quản lý permissions theo least privilege principle.

## Best Practices

| BP | Name | Description |
|----|------|-------------|
| [SEC03-BP01](SEC03-BP01-Define-Access-Requirements.md) | Define access requirements | Xác định ai cần access gì |
| [SEC03-BP02](SEC03-BP02-Least-Privilege.md) | Least privilege | Chỉ cấp quyền tối thiểu |
| [SEC03-BP03](SEC03-BP03-Emergency-Access.md) | Emergency access | Process cho emergency access |
| [SEC03-BP04](SEC03-BP04-Reduce-Permissions.md) | Reduce permissions | Review và reduce permissions |
| [SEC03-BP05](SEC03-BP05-Permission-Guardrails.md) | Permission guardrails | Boundaries cho permissions |
| [SEC03-BP06](SEC03-BP06-Lifecycle-Management.md) | Lifecycle management | Access theo employee lifecycle |
| [SEC03-BP07](SEC03-BP07-Cross-Account-Access.md) | Cross-account access | Monitor cross-account access |
| [SEC03-BP08](SEC03-BP08-Secure-Resource-Sharing.md) | Secure resource sharing | Secure sharing |

## Checklist

- [ ] Access requirements documented
- [ ] Least privilege implemented
- [ ] Emergency access process defined
- [ ] Regular permission reviews
- [ ] Permission guardrails set
- [ ] Public access analyzed
