GitHub Actions OIDC to AWS: Keyless Deploys, Scoped Right
A practitioner's guide to replacing static AWS keys in GitHub Actions with OIDC: the trust policy, how to scope the subject claim, and the 2026 immutable subject change that can lock you out.
Blog
Notes from real engagements: landing zones, pipelines, on-call, and the security work that gets left until an audit. No thought leadership, no funnels.
A practitioner's guide to replacing static AWS keys in GitHub Actions with OIDC: the trust policy, how to scope the subject claim, and the 2026 immutable subject change that can lock you out.
The assistant will scope your problem in a couple of minutes.