tag
4 posts
Operate EKS access entries with explicit authentication modes, least-privilege policies, Kubernetes RBAC, safe aws-auth migration, and real-principal tests.
Operate EKS Pod Identity with scoped IAM roles, SDK credential-chain checks, node agents, cross-account delegation, and a reversible migration plan.
Federate GitLab CI jobs to AWS with short-lived OIDC credentials, narrowly scoped IAM trust, protected deployment rules, and auditable role sessions.
Design GKE workload federation with Kubernetes principals, scoped IAM bindings, metadata-server verification, and a safe migration from service-account keys.