Workload Identity

Cryptographic identity for software workloads (containers, services, functions) rather than humans. Workload identity replaces long-lived API keys with short-lived, attested credentials. SPIFFE is the standard; cloud providers offer proprietary equivalents.