workload identity federation

In short: Workload identity federation uses a platform identity to obtain credentials elsewhere without a stored key. A Kubernetes service account is one example of that identity. Trust is set up between platforms in advance. It removes the need to copy secrets between clouds.

Where does it show up in practice?

Use it for autonomous agents running on cloud platforms.

Related terms

• spiffe
• secretless access