least-privilege-and-mediation

Audit access control configurations for least privilege and full mediation compliance.

47|5|Updated Apr 25, 2026

Search Tags:#authorization #security #access control #RBAC #least privilege #mediation #policy review

Ready to run

npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill least-privilege-and-mediation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: least-privilege-and-mediation
Source: https://github.com/RedHatProductSecurity/prodsec-skills/tree/main/module/skills/least-privilege-and-mediation
Command: npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill least-privilege-and-mediation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps verify that access control models adhere to best practices like least privilege and complete mediation, reducing security risks.

Core Features & Use Cases

Review Authorization Configurations: Evaluate RBAC, API access, and network permissions for adherence to security principles.
Design Security Policies: Use for designing and auditing access control models that enforce least privilege and continuous validation.
Use Case: When reviewing cloud IAM policies or API gateway configurations, this Skill ensures all requests are properly authorized and least-privilege principles are followed.

Quick Start

Review your current access control policies by examining your authorization setup and matching it against security best practices.

Frequently Asked Questions about least-privilege-and-mediation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my cloud IAM policies for least privilege compliance?▼

To audit cloud IAM policies for least privilege compliance, evaluate your authorization configurations against security best practices to ensure permissions are minimal and continuously validated. This process identifies over-privileged access to reduce security risks.

What is full mediation in access control and how does it secure APIs?▼

Full mediation in access control secures APIs by enforcing continuous, comprehensive authorization checks on every request. This ensures all access attempts are validated against current policies, preventing unauthorized actions.

Can I use this approach to review RBAC configurations across on-premise environments?▼

Yes, you can review RBAC configurations across on-premise environments. The evaluation applies to access review workflows across cloud, on-premise, and API environments, ensuring policies enforce comprehensive authorization checks.

What is the best way to design an authorization model that enforces continuous validation?▼

The best way to design an authorization model with continuous validation is to audit access control systems against complete mediation principles. This ensures all requests are properly authorized and least-privilege rules are followed.

Why should I evaluate API gateway configurations for least privilege?▼

Evaluating API gateway configurations for least privilege is necessary to ensure all requests are properly authorized. This reduces security risks by verifying that access control models enforce minimal privileges and complete mediation.