Tag
temporary-credentials
- Aug 20, 2026 Role Assumption and the Shape of a Temporary Session How a caller exchanges long-lived identity for short-lived credentials, what the issued token actually carries, and why revocation is harder than expiry. cloud infrastructure
- May 18, 2026 The Instance Credential Chain and What the Metadata Service Exposes How a virtual machine obtains role credentials without a stored secret, why network reachability becomes identity, and how the request-side defences work. cloud infrastructure
- Jan 8, 2026 Federating Workloads with OIDC: Which Claims a Trust Policy Must Pin How a workload proves its identity with a signed token instead of a secret, why audience and subject both need pinning, and where claim matching goes wrong. cloud infrastructure