service accounts
AssessTechniques
Non-human identities used by applications to access cloud resources with defined permissions.
Why it's here
Placed in Assess: 2 article(s) of evidence from 2 source(s), led by security coverage, with 0 in the last 30 days. Confidence 40%.
Evidence (2)
- 6The New Stack·6/26/2026securityThe hidden identity challenge in AI agents
The article argues that many AI agent projects fail security review because their identity and permission models are poorly defined. It recommends workload identities, short-lived credentials, brokered access, and full identity lineage to improve accountability, least-privilege access, and auditability.
- 7Martin Fowler·5/27/2026securityVibe coding needs security guardrails
Thoughtworks describes security failures it encountered while scaling a vibe-coded prototype built with generative AI tools. The article argues that prompting AI to “be secure” is insufficient and recommends adding security context files, tighter permission review, security intelligence feeds, and secure-by-default templates.