Puma Security Cross-Cloud Workload Identity Federation

Welcome to Puma Security's Workload Identity Federation repository. Nymeria's goal is to help cloud identity and security teams to eliminate long-lived credentials from their cloud estate. The Cloud Infrastructure as Code (IaC) configuration in this repository includes the following resources:

• Kubernetes

• Cloud Functions

• Virtual Machines

Documentation

Documentation, including step by step instructions for deploying the workshops and inspecting the resource configuration, can be found in the Nymeria GitHub Pages.

Learning More

Featured At

RSA Conference 2025

Coming soon: The latest Nymeria enhancement being presented cross-cloud workload identity at RSA Conference 2025

RSA Conference 2023

The original Nymeria workshop focused on cross-cloud authentication between GitHub Actions and the Microsoft Azure cloud, then from an Azure virtual machine to both AWS S3 and Google Cloud Storage.

Presentation Slides

Source Code

Kubernetes

• Long-Lived Credential GitHub Action
• Federated Identity GitHub Action
• Terraform Configuration

Virtual Machines

• Long-Lived Credential GitHub Action
• Federated Identity GitHub Action
• Terraform Configuration

Contributors

Eric Johnson - Principal Security Engineer, Puma Security

Brandon Evans - Certified Instructor and Course Author, SANS Institute