Research topic

Identity & access

Trust is a path, not a policy.

27 publications

Research on effective permissions, federation, workload identity, and the conditions that reshape cloud access.

From the desk

27 publications

Cross-account trust rarely fails at the obvious policy. The risk lives in the path between identities, conditions, and inherited access.

Workload identity removes a secret, but it also moves trust into issuers, claims, audiences, and runtime attachment points.

A recovery plan that depends on the compromised identity system is an aspiration. Build and test an independent administrative path.