Comment Comment by jpalawaga OAuth with refresh tokens.IAM roles/workload identity.Even time-limited or signed JWT, though has a separate issues.Maybe you'll say 'those are both just text values passed like an apikey' though api keys don't frequently rotate/time limited, which is an important security feature. parent jpalawaga 5 months ago
IAM roles/workload identity.
Even time-limited or signed JWT, though has a separate issues.
Maybe you'll say 'those are both just text values passed like an apikey' though api keys don't frequently rotate/time limited, which is an important security feature.