Just published: Using Workforce Identity Federation and Entra App roles (instead of groups) to control access to Google Cloud
jpassing.com/2025/03/20/usi…
@revbl0ck I'm glad I added a warning about this to our docs some time back... FWIW, I think the underlying issue is that GitHub uses the same issuer across all tenants: cloud.google.com/iam/docs/use-w…
Just-in-Time Access 1.4 is out, introducing UI improvements, additional configuration options, and the ability to choose the duration for which to activate a role.
github.com/GoogleCloudPla…#GoogleCloud#IAM
Published a new article on how to extend a platform or service to support workload identity federation, and some best practices to follow
cloud.google.com/iam/docs/use-w…
Keeping track of SSH keys on #GoogleCloud can be tricky, especially when using metadata-based keys. But with IAP Desktop 2.26, it gets a little easier.
jpassing.com/2022/04/09/kee…
When developing locally, we sometimes have to do things that only service accounts can do... but that's not a good reason for using service account keys
jpassing.com/2022/04/08/doi…#GoogleCloud#Security
To call certain Google APIs, we sometimes have to use domain-wide delegation. But using domain-wide delegation doesn’t mean we have to use service account keys.
jpassing.com/2022/01/15/usi…#googlecloud#oauth
By using IAP, we can ensure that an application only receives requests that are authenticated and satisfy context-aware access policies. But there are still a few things that a web application needs to do itself: jpassing.com/2022/01/09/usi…#GoogleCloud#ZeroTrust
284 Followers 1K FollowingFlowers are the most precious peony, people are the most prominent friends, make friends without gold and silver, only make friends with one heart
761 Followers 322 FollowingAssociate professor @sbucompsc | research on network and system security, network monitoring and measurement, online privacy | @[email protected]
160 Followers 771 FollowingEdinburgh-based software developer and single malt lover. Co-founder and CTO at TILLIT @tillitinvest, building a next-generation DIY investment platform
2K Followers 764 FollowingPester & Profiler owner and maintainer. Senior software engineer, developing VSTest and MSTest at Microsoft. All opinions are mine.
358 Followers 410 FollowingAggregator für die top 3 Schlagzeilen pro Nachrichtenseite und Karte für Regionalnachrichten. Es schreiben die Macher @ThiesLindenthal und @wielinde
257 Followers 936 Followinghttp://t.co/o2OkIb8ApQ is a middle east focused blog where we are highlighting different Microsoft related news, events and activities. wp7 azure silverlight
356 Followers 318 FollowingDatabase and systems nerd. Working on AllThingsLake @Databricks, views are my own. Ultra-runner, Dad. Prev. Redshift Spectrum @AWS, @Google
262K Followers 208 FollowingBreaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
30K Followers 209 FollowingHacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
6K Followers 2K FollowingRemote desktop protocol expert, OSS contributor and Microsoft MVP. I love designing products with Rust, C# and PowerShell. Proud to be CTO at Devolutions. 🇨🇦
16K Followers 2K FollowingWindows and Authentication at Microsoft. Developer. Mostly dog pictures. Might actually be two dogs in a trench coat. 🇺🇸 / 🇨🇦 @syfuhs.net on blue sky
5K Followers 216 FollowingBlueHat is where the security research community and @Microsoft security pros come together as peers, to connect, share and learn. Run by @MSFTSecResponse
49K Followers 336 FollowingSecurity researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. Mastodon: @[email protected]
7K Followers 390 Following💼 Director of Security
📬 @CloudSecList
📚 https://t.co/TrQKzxfnYg
💬 I write about security strategy, technical leadership, and cloud security.
484 Followers 404 FollowingKC-10 #pilot, #AvGeek, #travelholic, and #MBA ✈️ Cofounder of @NextTripNetwork and cohost of @NextTripPodcast. All thoughts/opinions are mine.
1K Followers 993 FollowingThe Air Travel podcast — top #1 in 50+ countries — By @papadimitriou, with @cubedweller & @VViswalingam — Listen anywhere, watch on YouTube
274K Followers 646 FollowingNeuroscientist, journalist, brutally honest | Get “Sextinction” and “The End of Gender” FREE on Audible: https://t.co/l1FsYmFq53
6K Followers 4K FollowingThe leading #opensource #projectmanagement software. We empower project teams to achieve great things together. Join us on: https://t.co/i3T5VQGAw9
288K Followers 2K FollowingAuthor/Founder of @stratechery. Host of @ditheringfm @sharptechpod. @notechben for sports. @monkbent on other networks. Home on the Internet.
48K Followers 2K FollowingChief Technical Innovation Officer @crowdstrike. Windows Internals author and trainer. He/Him. RTs are not endorsements, opinions are my own.