Tag
workload-identity
- Feb 27, 2026 Delegating Provisioning Without Delegating the Account How a self-service pipeline obtains cloud credentials through workload identity federation, what the trust policy must pin, and how the blast radius stays bounded. devops
- Feb 6, 2023 Microsegmentation and Policy at the Workload Boundary Why per-workload policy beats address-based rules, how enforcement located in the host kernel changes the failure model, and what has to be observed before a policy can be written at all. security