Workload Identity Federation: Call Vertex AI from AWS Without Service Account Keys
This story is from 2026-10-29. It is preserved in the archive; the latest stories are on the live feed.
TL;DR Workload identity federation lets a workload on AWS prove its identity to Google Cloud with its IAM role and receive a short-lived GCP token, so no service account key file is stored anywhere. Bifrost v2.3.0 adds aws_workload_identity to Vertex AI keys: it signs an STS GetCallerIdentity reque…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-29 18:25 · DEV Community — AI
Workload Identity Federation: Call Vertex AI from AWS Without Service Account Keys