Stop Shipping Keys Between Clouds: Workload Identity Without Long-Lived Secrets

A service in one cloud needs to call a service in another. The fastest way to make that work is also the one that ages worst: create a long-lived access key in the destination cloud, store it as a sec