// tag — Backend

#security

3 entries across the vault.

architecture backend distributed-systems go microservices websockets automation concurrency cost ranchi

01Mar 26, 20263 min

Zero long-lived cloud keys: GitHub Actions → AWS with OIDC

How to delete every AWS access key from your CI and your laptop, replace them with short-lived roles, and make the blast radius of a leaked secret exactly zero.

awsiamoidcgithub-actions

Also tagged

noteCI should never hold a cloud key
noteRow-level security checklist