Machine & Workload Identity

Service principals, managed identities, workload identity federation, SPIFFE/SPIRE, and API key management.

Topics

Lessons

Automated renewal, short-lived certs, rotation policies

Managed identities, service principals, key rotation

Workload attestation, SVID, trust domains

Cross-cloud identity, OIDC federation for CI/CD, keyless auth