2 Prerequisites This skill 1 Unlocked

Skill · Cloud · Grant minimal cloud access, to humans and workloads alike

Let a workload reach a cloud service with no long-lived credential on disk

Let a workload reach a cloud service with no long-lived credential on disk: an attached identity when the provider offers one, otherwise a single-use bootstrap token exchanged at startup for a short-lived credential kept in memory, and a secret read from a secrets manager while knowing who holds the root key.

Start lesson 1The Cloud domain

• 2 lessons
• ~55 min of reading
• 2 quizzes
• 0 proof lab

The path

Where it comes from, where it leads

What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.

Before · 2 prerequisites

• Grant a human identity minimal, temporary and audited cloud permissions
• Choose a workload's compute model and size it from measurements

Recommended before · 1

• Replace the shared secret with a verifiable machine identity (OIDC)

This skill, for you

Let a workload reach a cloud service with no long-lived credential on disk

Computing

It unlocks · 1 skill

• Defend a cloud architecture in review, with written decisions and measurements

Lessons

How to learn it

2 lessons, about ~55 min, in program order. Each lesson ends with its quiz.

The program

2 lessons · ~55 min

1. 1Identifiants courts d'une machine : identité attachée ou jeton d'amorçage (in French)· 30 min
2. 2Gestionnaire de secrets et service de clés : consommer un secret, savoir qui détient la clé racine (in French)· 25 min

Beyond the lessons

Assess, practise, pass the proof

Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.

Assess yourself

2 quizzes

At the end of the lessons: passed at 70%, they confirm the skill.

Practice

No guided lab

No guided lab practices it yet.

Proof

No proof

Neither a challenge nor a mission with a proof yet.

Going further

• Machine identity and workload identity
• Chiffrement cloud : at-rest, in-transit, in-use et gestion des clés (in French)

Reference pages: they support the skill without teaching it, and do not count in your journey.

Around it

Who requires it, who teaches it

Required by

• Cloud Engineer

Taught by

• Cloud de A à Z (in French)

Same block · Grant minimal cloud access, to humans and workloads alike

• Grant a human identity minimal, temporary and audited cloud permissions

×

See in the glossary →