OIDC, bastion hosts, and production safety
About this episode
Jake and Michael discuss modern infrastructure security practices, focusing on OIDC and the risks of long-lived credentials.
In this episode, Jake and Michael dive into modern infrastructure security practices, sparked by an annual audit and the painful process of rotating AWS IAM tokens. That experience leads into a broader discussion on why long-lived credentials in GitHub Actions are risky, and how OIDC (OpenID Connect) enables a more secure, short-lived, role-based alternative. Show links Scout Suite OpenID Connect (OIDC) Laravel Forge Laravel Horizon Scramble Claude LoRA (Low-Rank Adaptation)
More episodes of North Meets South Web Podcast
- Unused APIs, Passport testing traps, and local AI bottlenecks
- Flight booking mistakes, Laracon AU, and dead letters
- Worktree structures, workflow events, and enum metadata
- Charging chaos, corona discharge, and vector embeddings
- OpenClaw, Arbor, and horseless carriages
- When AI clicks, automation at home, and developer workflows
Explore listener stats, chart rankings, contacts and more on the North Meets South Web Podcast podcast page.