All-Access Sticky Note
Temporary paperwork. Permanent access.
All-Access Sticky Note is the agent equivalent of the password on a sticky note: a credential created for one urgent task, with production scope, that never expired. The paperwork said temporary. The access said otherwise.
Symptom
A single service account with blanket scope, born during an incident, still active months later. Everyone agrees it should be scoped. Nobody is sure what breaks if it is.
Why It Matters
Temporary credentials without expiry dates become permanent infrastructure. The Sticky Note keeps the incident response alive long after the incident, with the widest scope it was ever handed.
What the Chapter Gives You
How to give emergency access an expiry by default, the scoping review that retires sticky notes safely, and why "temporary" must be enforced by the system, not the intention.
Want the full chapter? Grab the free cheat sheet, read an excerpt, or get the book.
Recognize this one in your codebase?
Free cheat sheet, excerpts, and interactive diagnostics.