Workload Identity Federation: How it Works, and How the Trust Gets Too Loose
How workload identity federation works on AWS, Azure and GCP, why a wildcard subject condition trusts your whole organisation, and how to audit the federation you already have.
What Is a Machine Identity? Certificates, Cloud Workloads and Everything Between
Machine identity means two things: certificates and keys from PKI, and the roles and service accounts cloud workloads run as. How they differ, and the lifecycle nobody runs.
What Is a Non-Human Identity? A Cloud Engineer’s Definition
What a non-human identity actually is in AWS, Azure and GCP, how it differs from machine and workload identity, where AI agents fit, and how to inventory the ones you already have.