🔧 Zero-Secret CI/CD: GitHub Actions + OIDC on AWS (Part 6)

Zero-Secret CI/CD: GitHub Actions + OIDC on AWS (Part 6)


No AWS_ACCESS_KEY_ID in your GitHub secrets. Ever. Here's how OIDC trust works and why it's strictly better.




The most common GitHub Actions setup I see in portfolios stores AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as repository secrets. Those are long-lived credentials tied to an...