federated credentials

How should I replace long-lived Kubernetes credentials and restrict workloads outside the cluster?

I inherited a couple of in-cluster agent workloads that authenticate to internal APIs and a database using long-lived credentials stored in Kubernetes Secrets. There is also a static…

What are the options for scoped machine authentication with AWS?

AWS identity integration can be difficult in regulated environments that require federated credentials and machine-level authentication. I'm looking for an approach where individual workloads or resources can present…

What’s the best way to authenticate GHES Terraform deployments to Azure?

We have several Terraform repositories hosted on on-premises GitHub Enterprise Server that deploy Azure infrastructure. Until now, deployments have been manual: an operator runs az login, then executes…

What’s the best way to authenticate GitHub Actions from GHES to Azure?

We have several Terraform repositories hosted on an on-premises GitHub Enterprise Server instance. They deploy Azure infrastructure across one or more subscriptions. Until now, deployments have been run…

What are safer alternatives to storing an Azure app client secret?

I'm new to Azure and have a resource that is accessed by a web app in another Azure tenant. The web app currently authenticates with a service principal,…