SECURING CI/CD: DON'T USE LONG-LIVED API TOKENS, USE OPENID CONNECT INSTEAD

Summary from the TLDR InfoSec newsletter

OpenID Connect is a mechanism for applications to authenticate without requiring long-lived credentials like API keys. This post provides tutorials for connecting GitHub and AWS to authenticate from GitHub Actions via OpenID Connect as well as sample workflows to build and push Docker containers to ECR and plan/apply Terraform changes. The post concludes by describing how OpenID Connect can be used with Amplify.