kt
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
🌐 dev.toSource
A four-step breakdown of AWS SigV4 with an 80-line Python implementation, the asymmetric SigV4A (ECDSA P-256) that Multi-Region Access Point forced into existence, plus Chunked Upload, Presigned URL, and the Clock Skew traps that bite in production.
🌐 dev.toSource
IAM Roles Anywhere hands out IAM Role temporary credentials to workloads outside AWS, using X.509 certificates instead of long-lived access keys. This article walks through the Trust Anchor / Profile / Role triangle, the CreateSession signing flow, what the credential helper actu
🌐 dev.toSource
From Dev.to - beginners: AWS Free Hands-On: build S3 + Lambda + DynamoDB on the Always Free tier, plus IAM, CloudWatch, and cost guardrails in 30 minutes
🌐 dev.toSource
From Dev.to - aws: AWS Deep Dive: what it actually is, how regions and accounts fit together, and where auth lives
🌐 dev.toSource
From Dev.to - opensource: Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig
🌐 dev.toSource
From Dev.to - security: Introducing Omega: SPIFFE Workload Identity + AuthZEN Authorization in a Single Binary
🌐 dev.toSource
From Dev.to - github: Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking
🌐 dev.toSource
From Dev.to - security: I built chainscope: reading supply chain attacks across 6 surfaces, one slide at a time
🌐 dev.toSource
From Dev.to - security: SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier
🌐 dev.toSource
From Dev.to - docker: Why Did Docker Abandon TUF?: A Turbulent History of Container Signing