GitLab Deploy Token Metadata Belongs in a Reviewable InventoryA GitLab deploy token created without an expiry date stays valid until it is revoked. That can be intentional. It becomes a problem when the team cannot say which project still uses it, who owns it, oSep 28 · 2 min readtokentimer.hashnode.dev
768 Leaked AWS Keys Had Full Admin Access. Most Were Years OldAn AWS key can disappear from a public repository and still work in AWS. The credential still has an identity, a permission set, unknown copies, and possibly live dependencies. Removing that authenticSep 6 · 8 min readtokentimer.hashnode.dev
AWS Access Keys Don’t Expire: Govern the Exceptions, Not Just the Rotation DateAn AWS IAM user access key can remain valid long after the workload, integration, or person that needed it is gone. The credential does not know that a migration finished or a pipeline was replaced. UAug 28 · 6 min readtokentimer.hashnode.dev
