Identity & Access
Least Privilege
Also: principle of least privilege, PoLP
Giving a person, program or agent only the access it needs for its task, and nothing more.
In more detail
It is the single most useful control against agent mishaps, because it limits what any mistake or hijack can reach. In practice: narrow token scopes, read-only access by default, per-project credentials and no standing admin rights. Review grants regularly, since access tends to accumulate.