Eliminating Secrets: Workload Identity Federation in practice with AWS

Eliminating Secrets: Workload Identity Federation in practice with AWS

Eliminating Secrets: Workload Identity Federation in practice with AWS

This session explores how workload identity federation enables a more secure, scalable approach—eliminating long-lived credentials in favor of identity-based access.

We’ll explain how it works across cloud providers and integrates with GitHub Actions to enforce fine-grained, repo-based access controls. Then we will dive into a real-life scenario with Corelight and their usage with AWS.

Attendees will learn how to replace static secrets with dynamic identity, improving security while simplifying operations, and gain an understanding of how workload identity federation works in practice and how to apply it to modern cloud environments.