Test-suite-guided discovery of least privilege for cloud infrastructure as code

This work presents an approach to automatically discover least privilege, which utilizes a test suite, which represents what a system should achieve on the cloud, as an indicator of least privilege, and it iterates testing on the cloud and (re)configuration of permissions on the basis of the test results.