Search

Lessons (8)

• Safe AWS Deployments with IaC and CI/CD

  … Keep environment-specific configuration outside the immutable image where appropriate. OIDC credentials, simply explained The CI platform presents …

• Authentication, Authorization & API Security

  … this app may read my calendar". - OpenID Connect (OIDC) = authentication on top of OAuth: "this is who the …

• Secrets, Ephemeral Values, and Least Privilege

  … people and runners Use identity federation such as OIDC for CI instead of long-lived access keys. Scope …

• CI/CD and Reviewed Production Changes

  … Use OIDC federation and protected environments. Limit who can download plan artifacts and trigger apply. Avoid posting complete …

• Multi-Account Strategy, Governance and Security Operations

  … assume a role in the target account through OIDC or cross-account trust (see the IAM deep dive …

• Practical Project: Deploy a Real CRM App on EKS

  … GitHub Actions with OIDC (no stored AWS keys in GitHub): yaml name: deploy-crm-core on: push: branches …

• Containers at Scale: ECS Deep Dive and EKS

  … Map Kubernetes ServiceAccounts to IAM roles : - EKS Pod Identity (simpler, association-based) or IRSA (OIDC-based). - The pod …

• AWS Interview Questions: Clear Answers

  … artifacts, automated tests, a reviewed IaC plan, temporary OIDC credentials, gradual rollout, rollback capability, and a check of …