https://support.tools/tags/aws-iam/Recent content in AWS IAM on Support ToolsHugoen-USFri, 23 Oct 2026 00:00:00 +0000https://support.tools/post/enterprise-github-actions-security-secret-management-guide-2025/Sun, 25 May 2025 16:34:42 -0500https://support.tools/post/enterprise-github-actions-security-secret-management-guide-2025/<p>Most GitHub Actions secret leaks are not clever. A long-lived AWS key sits in repository secrets for three years, a <code>pull_request_target</code> workflow checks out a fork and runs its <code>npm install</code> with that key in the environment, or a tag on a popular action gets repointed to malicious code. This guide fixes each of those with concrete workflow YAML, in the order that removes the most risk first.</p>