Shrink the blast radius: replace an administrator key in a CI pipeline with a policy that allows only the deployment, and remove the old access keys that nobody uses. This interactive lesson needs JavaScript.