Blog

★ Featured

Blocking the ways to print an environment is a list, and the list of ways to print an environment is not a list. What worked instead.

An access log that records headers, bodies or query strings is a second copy of the secrets it was meant to protect. What to log instead.

One key per service cannot say "the agent may use this account but not that one". Labels can, and the label is the address.

Ready when you are.