Netflix Bridges AWS IAM and Internal Identity with Workload Attestation
Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to internal services without directly injecting credentials. By Leela Kumili
We haven't written up this one. InfoQ has the full story — the link below goes straight to it.