#security

IAM feels random until you see the one check it runs on every request. After that, policies stop being magic words.

A way to hand credentials to workloads without a single secret ever landing in a file, an env dump, or a git history.