#Zero Trust

3 articles tagged with Zero Trust.

Cloud•#Security#Identity•last week

mTLS for Service-to-Service Auth — Beyond API Keys

A shared API key between two internal services proves nothing about who is calling. mTLS makes every service present a cryptographic identity instead.

KU

Kiril Urbonas·1

Read article

Cloud•#Identity#Security•last week

Keyless Cloud Authentication — Ending Static Credentials Across AWS, GCP, and Azure

Long-lived access keys are the root cause behind most cloud breaches. This is the complete map to keyless auth — how workload identity federation and OIDC replace static secrets everywhere, and where to start.

KU

Kiril Urbonas

Read article

Cloud•#Security#Identity•2 weeks ago

Zero-Trust Service-to-Service Auth with SPIFFE and SPIRE

Static service tokens leaked into logs and never rotated. SPIFFE identities plus SPIRE-issued SVIDs gave us short-lived certs and killed the shared-secret sprawl.

KU

Kiril Urbonas·1

Read article