DEVOURED
Pulumi ESC now issues OIDC tokens for any service
Pulumi ESC can now mint short-lived OIDC tokens, allowing developers to authenticate services without storing static API keys.
What: Pulumi ESC has added an 'fn::open::oidc' provider that generates temporary tokens expiring within one hour for services like Anthropic, Cloudsmith, and JFrog Artifactory.
Why it matters: This move reflects a broader industry push to eliminate 'secret sprawl' by replacing long-lived static credentials with just-in-time, short-lived tokens generated from trusted environments.
Decoder
- OIDC (OpenID Connect): An identity layer on top of the OAuth 2.0 protocol that allows for verifying identity and obtaining profile information via signed tokens.
Original article
Announcing Snowflake Dynamic and Rotated Credentials with Pulumi ESC
Secure your Snowflake access with Pulumi ESC's new dynamic OIDC login for temporary credentials and automated RSA keypair rotation for user secrets.
Explore all 51 articles in today's digest
Fresh dev news, AI-digested daily. Never miss a trend at devoured.fyi