AWS is great for this. IAM policies can allow IP Addresses or more safely just named EC2 instances. Our deploy server requires nothing.

▲

nijave a day ago | parent [-]

CircleCI and I believe GHA support injecting signed JWTs you can use to bootstrap identity be it an IAM role or some other platform where you can trust an OIDC issuer

	▲	hinkley 18 hours ago \| parent [-]
		> injecting signed JWTs How is that not secrets management?