IAM Blast Radius Is an Architecture Problem, Not a Policy Problem

Most IAM reviews start too late, after the account structure and trust boundaries are set. Least privilege isn't fewer actions; it's smaller failure domains.