Eliminating Long-Lived Cloud Secrets via GitHub Actions OIDC Federation
Stop storing long-lived cloud keys in GitHub Secrets. Learn how to use OIDC federation to exchange short-lived GitHub tokens for temporary cloud credentials.
Loading…
ReadMeFeed / Community knowledge
#cloud-security
Real questions. Useful conversations. Find the people who know your stack.
githubReplace Long-Lived Cloud Secrets in GitHub Actions with OIDC
Swap static cloud access keys in GitHub Actions for short-lived OIDC tokens, with constraints, an AWS trust-policy example, and validation steps.
Architecting Secure State and Secrets Management in Pulumi
Learn how to architect Pulumi for security, focusing on encrypted state backends, KMS integration, and operational guardrails to prevent secret leakage in CI/CD pipelines.
pulumiUsing GitHub Actions OIDC for Cloud Deployments: Minimal Design, Trust Boundaries, and Operational Validation
Replace long‑lived cloud credentials in GitHub Actions with a short‑lived OIDC token. Minimal design, claim‑based trust, operational checks, and failure modes explained for AWS, GCP, and Azure.
githubactionsReplacing Cloud Secrets with GitHub Actions OIDC: An Architecture Note
GitHub Actions can mint short-lived OIDC tokens that cloud providers exchange for temporary credentials — no stored secrets. The security lives in the cloud-side trust condition, not the token.
Stopping Cloud Waste and Security Leaks at the Pull Request
Learn how to move infrastructure security and cost optimization from post-deployment audits to the pull request using Codeac's static analysis and cloud-resource detection.
terraform
Mastering Azure Logic Apps (Standard): Implementing Secure API Integration with Managed Identities
In the landscape of enterprise integration, Azure Logic Apps (Standard) represents a significant architectural shift from its multi-tenant Consumption predecessor. By moving to a single-tenant…
HTTP 403 Access Denied: Amazon S3 Block Public Access
Amazon S3 Block Public Access (BPA) provides a centralized control to prevent the accidental exposure of data by overriding bucket policies and Access Control Lists (ACLs). This feature operates at both the account level and the individual bucket level, utilizing four distinct settings: BlockPublicAcls , IgnorePublicAcls , BlockPublicPolicy , and RestrictPub
Mastering Azure App Service: A Precise Guide to Enterprise-Grade Web Hosting
Azure App Service represents the pinnacle of Platform-as-a-Service (PaaS) offerings for web hosting, providing an abstraction layer that removes the overhead of managing underlying virtual…