https://blog.mishraji.org/tags/oidc/ Recent content in OIDC on mishraJi Hugo en-us Thu, 27 Aug 2026 00:00:00 +0000 https://blog.mishraji.org/posts/workload-identity-management/ Thu, 27 Aug 2026 00:00:00 +0000 https://blog.mishraji.org/posts/workload-identity-management/ <h2 id="introduction">Introduction</h2> <p>A GitHub Actions pipeline needs to deploy resources into an AWS account. Before AWS will accept the API calls, the pipeline has to prove who it is.</p> <p>For a long time the answer was a static credential. You created an IAM user in AWS, generated an access key for it, and pasted the key ID and secret into GitHub Secrets.</p> <figure><img src="https://blog.mishraji.org/posts/workload-identity-management/images/figure1-static-credential.png" alt="A GitHub Actions workflow authenticating to AWS with a static access key stored in GitHub Secrets."><figcaption> <p>A GitHub Actions workflow authenticating to AWS with a static access key stored in GitHub Secrets.</p>