Are you familiar with the Principle of Least Privilege?

The principle of least privilege means that each user, process, or program is granted only the rights and access necessary to perform their tasks, and no more. This reduces security risks because, in case of a compromise, the attacker will have limited access.

For example, if a service needs to read data from a database, it should not be granted rights to delete or modify data. In Go, this can be implemented by restricting access rights to resources and using roles with the minimum necessary permissions.