AWS is great for this. IAM policies can allow IP Addresses or more safely just n... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		themafia 1 day ago \| parent \| context \| favorite \| on: GitHub Actions has a package manager, and it might... AWS is great for this. IAM policies can allow IP Addresses or more safely just named EC2 instances. Our deploy server requires nothing.

nijave 23 hours ago [–]

CircleCI and I believe GHA support injecting signed JWTs you can use to bootstrap identity be it an IAM role or some other platform where you can trust an OIDC issuer

hinkley 18 hours ago | [–]

> injecting signed JWTs

How is that not secrets management?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact