Workload Identity Federation: How it Works, and How the Trust Gets Too Loose
How workload identity federation works on AWS, Azure and GCP, why a wildcard subject condition trusts your whole organisation, and how to audit the federation you already have.