tag
4 posts
Federate GitLab CI jobs to AWS with short-lived OIDC credentials, narrowly scoped IAM trust, protected deployment rules, and auditable role sessions.
Build reusable GitLab CI components with validated inputs, collision-safe jobs, deliberate version pins, and tests that catch breaking pipeline changes.
Design GitLab CI DAGs that avoid duplicate pipelines, transfer explicit artifacts, and serialize production deployments without hiding release races.
Protect production deployments in GitLab with explicit environment declarations, authorized deployers, approval rules, serialized jobs, and audit-ready controls.