How to Apply Least Privilege When Securing Arduino-Based IoT Devices for Cloud Connectivity

When connecting an Arduino‑based device to a cloud IoT service, applying the principle of least privilege means limiting the device’s credentials and permissions to only what is necessary for its intended function.

For example, you can store a device‑specific SAS key or X.509 certificate instead of a shared master key, and you can configure the IoT hub to grant the device only the rights to send telemetry and receive desired properties.

Explain how to implement these steps on an Arduino platform, including where to store credentials securely, how to generate scoped keys, and what configuration changes are needed in the sketch and cloud side.