Hands-On Workshop: Destroying Long-Lived Cloud Credentials with Workload Identity Federation

Attackers have been breaching the cloud for years by stealing long-lived credentials. To combat these attacks, cloud providers have been building improved authentication workflows for external identity providers. This workshop explores Workload Identity Federation and how you can replace long-lived cloud credentials with short-lived tokens signed by an OpenID Connect identity provider. Join Eric Johnson, author of the open-source Nymeria project, to get hands-on experience with the Workload Identity Federation capabilities in GitHub Actions, Azure, AWS, and Google Cloud.

The …

attackers attacks authentication cloud connect credentials external federation identity identity federation identity providers openid openid connect stealing tokens workflows workload workshop