https://kukie.tech/tags/external-id/Recent content in External-Id on HistoryHugoko-krMon, 19 Oct 2026 13:00:00 +0900https://kukie.tech/posts/kukie-infra-07/Mon, 19 Oct 2026 13:00:00 +0900https://kukie.tech/posts/kukie-infra-07/Connecting a customer’s EKS cluster without taking any long-lived key — a per-team ExternalId against the confused deputy, a role template that can only register itself into chosen namespaces, the k* pattern that slipped past a kube-* deny, 15-minute tokens, and the address check that blocks private endpoints.