Top all-time · #9601
Aidan Steele
Personal blog · awsteele.com/blogprogrammingsecurity
Aidan Steele's personal blog at awsteele.com covers programming and security. Since 2021, 8 different Hacker News readers have linked it 13 times, most often “AWS federation comes to GitHub Actions”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link Aidan Steele's AWS posts as sources: one on Graviton2 ARM support for Lambda with Go, and one on AWS federation as an alternative to storing credentials in GitHub Secrets.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Here's my seventh or eighth attempt at a blog. It's mostly going to be my experimentation with using AWS (Amazon Web Services, not Aidan William Steele).
Most-linked posts?
- AWS federation comes to GitHub Actions3 people · 3 mentions · first linked 2021-09-15
- A role for all your EC2 instances2 people · 2 mentions · first linked 2023-02-21
What Hacker News says?
It works with Go: https://awsteele.com/blog/2021/09/29/graviton2-arm-comes-to-...
Comment linking /blog/2021/09/29/graviton2-arm-comes-to-lambda.html
on “AWS launches ARM-powered Lambdas”Submitted AWS federation comes to GitHub Actions as a story · 121 points
HN discussionIsn't it just this? https://awsteele.com/blog/2021/09/15/aws-federation-comes-to... ( https://github.com/github/roadmap/issues/249 ) Why does SAML.to need to be used?
Comment linking /blog/2021/09/15/aws-federation-comes-to-github-actions.html
on “Show HN: Stop Putting AWS Credentials in GitHub Secrets”Submitted AWS GWLB: Deep Packet Manipulation as a story · 3 points
HN discussionOn gitlab, there has been another way for some time: There is a JWT token CI_JOB_JWT available in an env var which contains the branch name and other info as one of the claims [1]. One can then use this token to obtain production secrets based on whether the branch is trusted. Github has the same feature upcoming [2], which allows to get also directly AWS or GCP credentials restricted by branch name [3, 4]. [1] http…
Comment linking /blog/2021/09/15/aws-federation-comes-to-github-actions.html
on “Anatomy of a Cloud Infrastructure Attack via a Pull Request”Submitted How Ima.ge.cx Works (2023) as a story · 2 points
HN discussionSubmitted AWS role session tags for GitHub Actions as a story · 2 points
HN discussionSubmitted Shared VPCs Are Underrated as a story · 2 points
HN discussionSubmitted When AWS invariants aren't [invariant] as a story · 1 points
HN discussionSubmitted Improve GitHub Actions OIDC security posture with custom issuer as a story · 1 points
HN discussionSubmitted No need for AWS IAM users as a story · 1 points
HN discussionSubmitted A role for all your EC2 instances as a story · 1 points
HN discussionSubmitted A role for all your EC2 instances as a story · 1 points
HN discussion