OIDC for Cloud Auth

← Back to CI-CD Security

Using OpenID Connect tokens instead of static credentials for CI/CD authentication to cloud providers. GitHub Actions can authenticate to AWS, GCP, and Azure using short-lived OIDC tokens, eliminating the need for stored secrets and reducing the blast radius of token compromise.

Key Properties

• Short-Lived Tokens
• GitHub Actions OIDC
• Eliminating Static Credentials

---

supply-chain-security ci-cd oidc