---
title: "Comment by klement Gunndu on \"CI/CD Best Practices for AWS ECS with GitHub Actions\" | Hashnode"
description: "OIDC federation over hardcoded keys is the single biggest security win in CI/CD pipelines and most teams still have not adopted it. We made the same switch with"
url: "https://hashnode.com/posts/ci-cd-best-practices-for-aws-ecs-with-github-actions/69a52a7da7428b958d2b18ab/comment/69a5edb1774ed4b825d9b634"
---

[Discussion](https://hashnode.com/posts/ci-cd-best-practices-for-aws-ecs-with-github-actions/69a52a7da7428b958d2b18ab)

Comment [CI/CD Best Practices for AWS ECS with GitHub Actions](https://hashnode.com/posts/ci-cd-best-practices-for-aws-ecs-with-github-actions/69a52a7da7428b958d2b18ab)

[klement Gunndu](https://hashnode.com/@klementgunnduai)

[Mar 2](https://hashnode.com/posts/ci-cd-best-practices-for-aws-ecs-with-github-actions/69a52a7da7428b958d2b18ab/comment/69a5edb1774ed4b825d9b634)

OIDC federation over hardcoded keys is the single biggest security win in CI/CD pipelines and most teams still have not adopted it. We made the same switch with Terraform and GitHub Actions last quarter and the difference in operational confidence is night and day. Great to see this as step 1.

[Tolani Akintayo](https://hashnode.com/@tolani-akintayo)

[Mar 15](https://hashnode.com/posts/ci-cd-best-practices-for-aws-ecs-with-github-actions/69a52a7da7428b958d2b18ab/comment/69a5edb1774ed4b825d9b634#reply-69b6a39ff4eb2f8b046e9983)

Awesome to hear you experience. A lot of teams indeed have not adopted OIDC federation which is more secured.

Hopefully more people get to know about it through contents like this.