Attackers have been breaching the cloud for years by stealing long-lived credentials. To combat these attacks, cloud providers have been building improved authentication workflows for external identity providers. This technical session will explore Workload Identity Federation and how to replace long-lived cloud credentials with short-lived tokens signed by an OpenID Connect identity provider.