APPLICATION SECURITY AND LEAST PRIVILEGE ACCESS IN MODERN DEVOPS

In the context of modern DevOps, application security and the implementation of the principle of least privilege (PoLP) are becoming critical elements aimed at minimizing risks and improving the sustainability of IT systems. This article analyzes approaches to integrating security measures at all stages of the software development lifecycle, starting from the early phases, which reduces the likelihood of vulnerabilities. Special attention is paid to the principle of least privilege, which restricts access by users and system components to only the necessary rights, thereby increasing security and preventing unauthorized access. Strategies for minimizing permissions, ensuring infrastructure protection, and automating security checks in CI/CD pipelines are considered. The challenges associated with the implementation of these principles are also discussed, and ways to overcome them are proposed to improve the security and stability of software solutions.