Why You NEED To Ditch Service Account Keys NOW

Discover the power of keyless authentication in this tutorial, where I dive deep into Workload Identity Federation. This comprehensive guide is perfect for developers looking to secure their applications without the traditional complexities of managing service account keys. In this video, I'll walk you through the essential steps to configure keyless authentication using Workload Identity Federation. Learn how to seamlessly integrate this method with GitHub Actions, enhancing your CI/CD pipeline's security and efficiency. We start with direct workload identity federation setups and later explore how to leverage a service account impersonation for more flexible authorization. Whether you're a beginner or an experienced developer, this tutorial will equip you with the knowledge to implement advanced authentication strategies effectively. You can get the example repository here: https://github.com/chukaofili/wif Content: 0:00 - Intro 0:24 - Service Account Key Authentication 2:13 - What is Workload Identity Federation? 3:00 - Demo - Project Setup, CI + CD 8:19 - Demo - Direct Workload Identity Federation 24:20 - Demo - Workload Identity Federation via Service Account Impersonation 30:41 - Conclusion Subscribe to my Blog: https://iamchuka.com/