Tag
confused-deputy
- Feb 27, 2026 Delegating Provisioning Without Delegating the Account How a self-service pipeline obtains cloud credentials through workload identity federation, what the trust policy must pin, and how the blast radius stays bounded. devops
- Feb 24, 2026 Trust Policies, External IDs, and the Confused Deputy Why a trust policy naming a principal is not enough when that principal acts for many customers, and how a shared secret in the assumption request closes the gap. cloud infrastructure
- Jul 30, 2025 Object Capabilities and the Confused Deputy How unforgeable references replace identity checks, why ambient authority enables the confused deputy, and what membrane and revocation designs cost in a capability system. security