
Zero-Secret CI/CD: GitHub Actions + OIDC on AWS (Part 6)
No AWS_ACCESS_KEY_ID in your GitHub secrets. Ever. Here's how OIDC trust works and why it's strictly better.

Author profile
30+ years building dependable systems. Focused on serverless AWS architecture, event-driven design, and AI-powered solutions using Claude and Bedrock.
Browse the latest writing surfaced through DevArt.

No AWS_ACCESS_KEY_ID in your GitHub secrets. Ever. Here's how OIDC trust works and why it's strictly better.

React Query's refetchInterval turns a polling requirement into a one-liner. Here's the whole frontend, explained.

How to build retrieval-augmented generation that actually cites its sources — without a vector database subscription.

Why I chose Step Functions over SQS + Lambda — and what the execution history is actually worth.

How a single Postgres session variable — app.current_tenant_id — eliminates an entire class of data-leak bugs at the database level.

How I designed a production-ready RAG system from scratch using AWS-native services — and kept the monthly bill under $20.

Overview The contact form on bonefishsoftware.com is fully serverless — no EC2, no...

Overview Every push to the main branch on GitHub automatically builds the React app and...

Overview This article covers deploying a static React site to AWS using S3 as the origin,...

Overview This article covers scaffolding a production-ready React single-page application...

What We Built This series documents the end-to-end process of designing, building, and...