Blog

What we have learned,
written down.

Notes from real engagements: landing zones, pipelines, on-call, and the security work that gets left until an audit. No thought leadership, no funnels.

24 September 2026 8 min read

GitHub Actions OIDC to AWS: Kill Long-Lived Access Keys

How to wire GitHub Actions to AWS with OIDC and short-lived tokens instead of stored access keys: the provider, the role, a trust policy that actually scopes down, and the 2026 subject-claim change you have to plan for.

Rather talk than read?

The assistant will scope your problem in a couple of minutes.

Talk to the assistant Send a message

What we have learned,written down.

GitHub Actions OIDC to AWS: Kill Long-Lived Access Keys

Rather talk than read?

What we have learned,
written down.