A junior analyst on a reporting team has access to her team’s shared drive. Not finance. Not HR. She opens the internal assistant and asks it to summarize the company payroll spreadsheet by department. The agent resolves the document. The retrieval service fetches it using the platform’s service credential, because that is the only credentialContinue reading “The Confused Deputy Is Back, and This Time It Has an LLM”
Monthly Archives: June 2026
Beyond the API Key: Workload Identity Federation for AI Agents
We had migrated our agent workloads off static API keys. Federation configured, issuer registered, rules scoped, documentation updated, ticket closed. Then someone ran ant auth status inside a pod and found the static API key was still the credential winning every request. A leftover ANTHROPIC_API_KEY sat in the container environment, and it sits above federationContinue reading “Beyond the API Key: Workload Identity Federation for AI Agents”
