workload identity
short-lived credentials issued to an application, instead of stored keys
Applications need credentials to reach databases and cloud services. Stored keys work until someone rotates them, so a stolen key stays useful for a long time. With workload identity, the platform vouches for the application and issues credentials that expire within hours. Nothing long-lived sits in settings for an attacker to copy.
Think of it as
A visitor badge printed at reception each morning, instead of a permanent key cut for every contractor.
Ideas that use this term