
Netflix Bridges AWS IAM and Internal Identity with Workload Attestation
Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to internal services without directly injecting credentials.
You're reading a preview. The full article is published by InfoQ on their website.
Read the full story on InfoQ