Record · corpus.blog/posts/01a087a1-ce92-713f-845a-f2611fd07b5b

Agent Identities Are Service Accounts That Improvise

mattgoodrich.com · published 26 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mattgoodrich.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 30
Words captured: 2,705

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

When You Can Actually Use Workload Identity Read at the source ↗

mattgoodrich.com

https://spiffe.io/

spiffe.io

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

docs.aws.amazon.com

https://cloudsecurityalliance.org/artifacts/state-of-nhi-and-ai-security-survey-report

cloudsecurityalliance.org

https://blog.gitguardian.com/the-state-of-secrets-sprawl-2026/

blog.gitguardian.com

https://genai.owasp.org/llmrisk/llm01-prompt-injection/

genai.owasp.org

https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

genai.owasp.org

https://www.aim.security/lp/aim-labs-echoleak-m365

aim.security

https://invariantlabs.ai/blog/mcp-github-vulnerability

invariantlabs.ai

https://aembit.io/blog/aims-a-model-for-ai-agent-identity/

aembit.io

https://saviynt.com/blog/ai-agent-lifecycle-management

saviynt.com

https://datatracker.ietf.org/doc/html/draft-oauth-ai-agents-on-behalf-of-user-00

datatracker.ietf.org

https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization

modelcontextprotocol.io

https://kenhuangus.substack.com/p/the-day-metas-ai-agent-broke-least

kenhuangus.substack.com

Comment and Control: Prompt Injection to Credential Theft in Claude Code, Gemini CLI, and GitHub Copilot Agent Read at the source ↗

oddguan.com

https://jfrog.com/blog/2025-6514-critical-mcp-remote-rce-vulnerability/

jfrog.com

SPIFFE Is Workload Identity That Crosses Boundaries Read at the source ↗

mattgoodrich.com

https://www.hashicorp.com/en/blog/vault-enterprise-1-21-spiffe-auth-fips-140-3-level-1-compliance-granular-secret-recovery

hashicorp.com

https://goteleport.com/docs/machine-workload-identity/

goteleport.com

https://www.strata.io/resources/news/strata-identity-introduces-ai-identity-gateway-and-validation-sandbox/

strata.io

https://www.databricks.com/blog/ai-gateway-how-connect-agents-external-mcps-securely

databricks.com

https://github.com/agentgateway/agentgateway

github.com

https://github.com/IBM/mcp-context-forge

github.com

https://saviynt.com/products/identity-security-for-ai

saviynt.com

https://www.sailpoint.com/products/agentic-fabric

sailpoint.com

Introducing 1Password® Unified Access: Identity Security for Humans and Their AI Agents Read at the source ↗

1password.com

Stop Putting Secrets in .env Files: A 1Password Service Account for Claude Read at the source ↗

mattgoodrich.com

https://permiso.io/blog/ai-agent-runtime-security

permiso.io

https://www.solo.io/blog/agent-identity-and-access-management---can-spiffe-work

solo.io

Agents Need Capabilities, Not Roles Read at the source ↗

mattgoodrich.com