FIELD NOTES01
The same keyless CI idea, this time on Google Cloud
Build Workload Identity Federation with Terraform and let GitHub Actions impersonate a service account safely.
FOLLOW A THREAD
Security
Essays, notebooks, and field notes connected by security.
Articles about Security
FIELD NOTES02
Give GitHub Actions an AWS identity, not a forever key
Use Terraform and OIDC to exchange short-lived workflow tokens for narrowly scoped AWS credentials.