Netflix Bridges AWS IAM and Internal Identity with Workload Attestation

T2Covered by 1 source · first reported by InfoQ at 21 Oct, 13:45 UTC

Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to…