What’s the safest way to retire unused service accounts and tokens?
I recently reviewed some old side projects and found more machine credentials than expected: CI access tokens for projects I abandoned years ago, deploy tokens for hosts I…
credential management
What’s the best way to manage and rotate Microsoft Entra client secrets?
Microsoft Entra client secrets can have relatively short expiration periods, and unlike certificates, they don't appear to support automatic rollover in the same way. What is the recommended…
What’s the best way to manage and rotate Entra client secrets?
Entra client secrets can have relatively short expiration periods, and I'm not aware of an automatic rollover mechanism comparable to certificate rotation. What is the recommended way to…
How should we prioritize major integration gaps before our SOC 2 audit?
We acquired a roughly 30-person company about nine months ago, but the technical integration is still incomplete. Our SOC 2 audit is scheduled in about four weeks, and…
What’s the best way to provision database users in a GitOps workflow?
When deploying a new component, GitOps can create the Kubernetes resources such as the Deployment, Service, and ServiceAccount. The part I'm unsure about is database access: how should…
How to Store a SecureString for a GMSA Account
I'm currently developing a PowerShell script that needs to run under a Group Managed Service Account (GMSA). When I run the script using my regular account, everything works…