Using secrets and certificates for system-to-system communication often proves cumbersome and prone to leakage. Why bother with credentials when there is a more secure and easy approach, like going passwordless? In this talk, you will learn how to leverage the power of OpenID Connect to authenticate your GitHub Actions when deploying to Microsoft Azure.
This session will delve into the fundamentals of OpenID Connect and its integration with GitHub Actions. Discover practical techniques to organize workflows effectively at an organizational level, implement federated credentials, and facilitate token exchange.
Session Type: General Session
Topic: Cloud, Continuous Integration + Continuous Deployment (CI/CD), DevOps, Infrastructure as Code, Security, Productivity
Target Audience: Enterprise - Engineering Leadership, Enterprise - Developers, Open Source Developers or Maintainers, Security Professionals
Industry: Applicable to All
Level: Level 300: Advanced
GitHub Product: Actions, Enterprise/Admin
Delivery Format: In-person , Recorded, On-demand