Record · corpus.blog/posts/01a08727-0d97-7141-bc2f-12d99b76e97a

Agent Identity: What the Standards Fix, and What They Leave Open

aminrj.com · published 21 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aminrj.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 32
Words captured: 3,292

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://kubernetes.io/docs/concepts/security/rbac-good-practices/

kubernetes.io

https://aminrj.com/assets/diagrams/agent-identity-authn-authz-gap.svg

aminrj.com

https://datatracker.ietf.org/doc/html/draft-ietf-wimse-arch-07

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-wpt/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/

datatracker.ietf.org

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/protect-against-consent-phishing

learn.microsoft.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

docs.aws.amazon.com

https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation

learn.microsoft.com

https://docs.cloud.google.com/iam/docs/service-account-impersonation

docs.cloud.google.com

https://aminrj.com/assets/diagrams/cross-cloud-workload-identity.svg

aminrj.com

https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview

learn.microsoft.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html

docs.aws.amazon.com

https://docs.cloud.google.com/iam/docs/best-practices-service-accounts

docs.cloud.google.com

https://aminrj.com/assets/diagrams/permission-ceiling-layers.svg

aminrj.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_abac-saml.html

docs.aws.amazon.com

https://www.ibm.com/reports/cost-of-a-data-breach

ibm.com

https://www.entrosecurity.com/research/

entrosecurity.com

https://aminrj.com/posts/finding-confused-deputy-in-your-agent/

aminrj.com

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks Read at the source ↗

unit42.paloaltonetworks.com

The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure Read at the source ↗

tenable.com

https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc8693.html

rfc-editor.org

https://spiffe.io/

spiffe.io

https://spiffe.io/docs/latest/spire-about/spire-concepts/

spiffe.io

https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture-generative-ai/gen-auto-agents.html

docs.aws.amazon.com

https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals

learn.microsoft.com

https://arxiv.org/abs/2604.23280

arxiv.org

https://labs.cloudsecurityalliance.org/research/csa-whitepaper-nonhuman-identity-agentic-ai-governance-v1-cs/

labs.cloudsecurityalliance.org

https://nhimg.org/articles/spiffe-and-ai-agent-identity-expose-the-next-authorization-gap/

nhimg.org

https://www.sans.org/blog/your-ai-agent-easily-confused-deputy-why-cloud-security-needs-credential-broker

sans.org

https://aminrj.com/posts/what-read-only-actually-reaches/

aminrj.com

What Prompt Injection Benchmarks Actually Measure Read at the source ↗

aminrj.com