OIDC, bastion hosts, and production safety

In this episode, Jake and Michael dive into modern infrastructure security practices, sparked by an annual audit and the painful process of rotating AWS IAM tokens. That experience leads into a broader discussion on why long-lived credentials in GitHub Actions are risky, and how OIDC (OpenID Connect) enables a more secure, short-lived, role-based alternative.

Show links

• Scout Suite
• OpenID Connect (OIDC)
• Laravel Forge
• Laravel Horizon
• Scramble
• Claude
• LoRA (Low-Rank Adaptation)

Creators and Guests

Host

Jake Bennett

Christ follower, software dev @wilbergroup using @laravelphp. Co-host of @northsouthaudio and @laravelnews with @michaeldyrynda

Host

Michael Dyrynda

Dad. @laravelphp Artisan. @LaraconAU organiser. Co-host of @northsouthaudio, @laravelnews, @ripplesfm. Opinions are mine.

What is North Meets South Web Podcast?

Jake Bennett and Michael Dyrynda conquer a 14.5 hour time difference to talk about life as web developers