Blast-radius containment

Designing so that one compromised account or service cannot reach everything.

Category: Security