What security best practices do you implement for IAM and data access control?
Write a SQL query that audits active access grants for active principals as of 2025-01-01. Include only high or critical sensitivity assets, and flag administrator grants or grants issued at least 90 days before the as-of date.
Output
- One row per qualifying access grant with the principal, asset, role, grant date, sensitivity, and review priority.
- Exclude inactive principals, revoked grants, non-sensitive assets, and recent non-administrator grants.
- Order by review priority, then principal name and asset name.
