How would you answer an interview scenario involving identity and least privilege in Cloud Security?

For an interview scenario involving identity and least privilege, I would first clarify the business goal, scale, constraints, and the failure or quality attribute the interviewer wants to explore. Cloud identity controls authenticate human and workload identities and grant only the permissions required to perform approved tasks. In this scenario, a deployment pipeline currently uses a permanent cloud administrator credential. Explain how you would redesign its access. For production, use federation, MFA, managed workload identities, role-based access, just-in-time elevation, access reviews, and separation of duties. I would then explain the main alternatives and tradeoffs, identify likely failure modes, and describe how I would validate the solution through testing, observability, security controls, and recovery or rollback planning.