Least privilege

Giving each person, service or function only the rights it needs. The thumbnail function's role can only read products/ and write thumbs/.