Netflix Bridges AWS IAM and Internal Identity with Workload Attestation

Leela Kumili — Wed, 21 Oct 2026 13:45:00 GMT

Netflix has developed a workload attestation mechanism for Apache Spark jobs running on Amazon EMR. The design combines AWS IAM identity with signed claims from Netflix’s control plane before issuing short-lived internal X.509 certificates, allowing managed compute workloads to authenticate to internal services without directly injecting credentials.

By Leela Kumili

Article: Cryptographic Foundation of Mobile ID Systems: an ISO/IEC 18013-5 Enterprise Architecture Blueprint

Praveen Kumar Gopalakrishnan — Fri, 16 Oct 2026 09:00:00 GMT

This article provides a framework for asking the right architectural questions before an enterprise commits to an mDL provider or library. It shows which components can be abstracted safely, which trust boundaries must remain visible to the enterprise, what cryptographic and interoperability properties should be verified, and how requirements change across real-world use cases.

By Praveen Kumar Gopalakrishnan

InfoQ - Authentication

Netflix Bridges AWS IAM and Internal Identity with Workload Attestation

Article: Cryptographic Foundation of Mobile ID Systems: an ISO/IEC 18013-5 Enterprise Architecture Blueprint