tag: Mtls · 2 items
- Platform/SRE — Plan: GA feature enabling ACM-backed mTLS from API Gateway to backend services — worth adopting for any zero-trust or regulated workload this quarter; audit existing REST API integrations and plan certificate provisioning via ACM or AWS Private CA.
- CI/CD — Skip
- Leader — Learn: Closes a common compliance gap in regulated industries (finance, healthcare) by extending mTLS to the API-to-backend path; relevant context if the org is pursuing zero-trust architecture or FedRAMP/HIPAA posture.
- Platform/SRE — Plan: Pod Certificates and Cluster Trust Bundles reaching GA in Kubernetes 1.37 introduces native X.509/mTLS workload identity as an alternative to service account JWTs; evaluate adopting cluster trust bundles and pod certificate issuance this quarter for services requiring mTLS.
- CI/CD — Skip
- Leader — Learn: Native X.509 workload identity baked into Kubernetes core shifts how orgs can approach service-to-service auth without a service mesh; worth tracking as input to future golden-path and identity-standards decisions.
- Signals: Kubernetes 1.37 EOL 2027-10-28