Replacing static secrets with federated workload identity at Calloway Freight Systems: an administrator key found in a public repository after 1,121 days; the identity staircase of eight treads — static keys, inventory, federation, scoping, short-lived tokens, conditions, monitoring, and owned and proven — with static cloud credentials falling from 541 to 58 and keyless workloads rising to 94.4 per cent; and the outcomes in the Non-Human Identity Register: 1,203 of 1,274 workloads keyless, administrator-equivalent identities cut from 64 to 9 and 86 of 94 pipelines on OIDC, signed for the Architecture Review Board.

CY-EXPERT-105Expert Level · Cloud Native Security

Workload Identity Control Challenge

An expert-level course on testing whether an organisation's containers, functions, pipelines and servers authenticate with identities that are unique, short-lived, least-privileged and owned - and on replacing static secrets with federation. Climb the identity staircase - eight treads from long-lived static keys everywhere, through inventory, federation, scoping, short-lived tokens, conditional access and monitoring, to every workload identity owned, scoped and evidenced - and assemble a standard and register an architecture board can approve and an auditor can re-perform.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Reconstruct an exposed-key incident, explain why static keys dominate cloud credential risk, count static credentials across clouds and set testable control objectives.
Build a register of every non-human identity with age, last use, cluster bindings and a current owner, and disable dormant credentials safely.
Assign each workload its federation pattern and pin every trust condition - audience, subject, repository, environment, service account - to one workload.
Split shared identities, derive least privilege from observed use over a long window, and reduce administrator-equivalent identities to named exceptions.

Price:৳12,000