InfoQ - Cloud Security

AWS Introduces Workload Credentials Provider for Automated Certificate and Secret Management

Renato Losio — Sat, 27 Jun 2026 11:04:00 GMT

AWS has recently announced the AWS Workload Credentials Provider to automatically deliver and refresh certificates and secrets for applications. The open source tool reduces the need for custom automation, helps prevent outages caused by expired certificates, and works in both AWS and non-AWS environments.

By Renato Losio

AWS Cognito Adds Multi-Region Failover for Authentication

Renato Losio — Sat, 20 Jun 2026 07:40:00 GMT

AWS recently introduced Amazon Cognito multi-region replication, which automatically replicates user identities and user pool configurations from a primary region to a secondary one. This enables applications to continue authenticating users from a replica region during outages, without requiring custom replication and failover mechanisms.

By Renato Losio

Article: Designing Continuous Authorization for Sensitive Cloud Systems

Venkata Nedunoori — Fri, 19 Jun 2026 09:00:00 GMT

Most cloud systems make one authorization decision at login. Everything after runs on trust established at authentication time. For systems handling regulated data, that gap is where breaches happen. This article presents a continuous authorization architecture covering risk-tiered evaluation, behavioral baselines, privacy-preserving audit trails, and a phased and incremental rollout.

By Venkata Nedunoori

Athena Coalition Brings Coordinated Defence to Open Source Security

Matt Saunders — Thu, 18 Jun 2026 08:00:00 GMT

Cybersecurity firm Chainguard has announced the launch of Athena, an industry coalition to use artificial intelligence to find and fix vulnerabilities in widely-used open-source software before attackers can exploit them. The coalition focuses on libraries, containers and other components that underpin web browsers, data centres, smartphones and payment systems.

By Matt Saunders