About

Cloud Identity Security is a small independent site about one problem: the trust between CI/CD pipelines and cloud accounts when they use OpenID Connect instead of stored keys. It has a free trust checker and a set of guides.

Who writes it?

The site is published under the name Cloud Identity Security. There is no newsroom or panel of experts behind it, and no one here claims professional credentials. Guides are researched and drafted with the help of AI tools. Before publication, every factual statement is checked against the primary source it cites, usually the documentation of GitHub, AWS, Microsoft or Google. Pages say which sources were used and when they were checked.

Nothing on this site has been reviewed by an outside security professional, and nobody here has tested vendor products. If you need advice for your environment, ask someone who can see it.

How is it funded?

At the moment it isn't: there are no ads, sponsors or affiliate links. If that changes, the affected pages will say so clearly, and the editorial policy will describe how sponsorship is kept apart from the content.

Is it affiliated with GitHub, AWS, Microsoft or Google?

No. Product names are used only to describe how those products work.

How do I report a mistake?

Email info@cloudidentitysecurity.com with the page and what's wrong. Corrections are logged in each guide's update history.