Research topic
Identity & access
Trust is a path, not a policy.
Research on effective permissions, federation, workload identity, and the conditions that reshape cloud access.
From the desk
3 publicationsThe permission path you didn’t review
Cross-account trust rarely fails at the obvious policy. The risk lives in the path between identities, conditions, and inherited access.
What changes when static keys disappear
Workload identity removes a secret, but it also moves trust into issuers, claims, audiences, and runtime attachment points.
Recover the control plane before you need it
A recovery plan that depends on the compromised identity system is an aspiration. Build and test an independent administrative path.