Hacker NewsHN submitter: saligrama
Original published:

We let our cloud agents query prod (with OIDC, not secrets)

We let our cloud agents query prod (with OIDC, not secrets)

Formal discusses using OIDC to grant cloud coding agents auditable, policy-controlled, short-lived access to production data without long-lived secrets.

Key points

  • •OIDC is used to achieve production access without long-lived secrets.
  • •The granted access permissions are auditable and policy-controlled.
  • •Access to cloud infrastructure is configured to be short-lived only.
#Security & Misuse#AI Agents#Semiconductors & Infrastructure#Formal#OIDC
See more