Least Privilege in a Cloud-First World