Lesson 3 of 9 · 30m

Role trust policies and the confused deputy

Who can assume a role, ExternalId for third parties, SourceArn for services, and OIDC that kills stored AWS keys in CI.