Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
May 01, 2023
30 min
Free
cicd
oidc
cloud-security
authentication
identity-management
github-actions
gitlab-ci
gcp
aws
azure
access-control
Description
This talk addresses the increasing need to secure cloud access as cloud adoption grows. Traditional access control mechanisms like access tokens are becoming insufficient against modern threats. Identity tokens such as OpenID Connect (OIDC) are emerging as a popular alternative for authentication and authorization in cloud environments, with major CI/CD platforms now supporting them. The session will cover the benefits of using OIDC for CI/CD pipelines, configuring cloud providers to accept OIDC tokens, and integrating OIDC-based authentication into popular CI/CD systems, complete with live demonstrations.