Mitigating CI/CD Credential Exfiltration via OIDC Federation in AWS
A technical evaluation of static IAM credential exposure vectors in modern CI/CD pipelines, STS web identity token exchange mechanics, and policy boundaries for multi-tenant VCS federation.
Alexander Hose on August 14, 2026