Alchemy replaces long-lived API keys with OIDC for all AWS-GCP cross-cloud bindings
samgoodwin89 · x · 2026-10-27
samgoodwin89, author of Alchemy, announced that all AWS <-> GCP resource bindings in Alchemy now use Identity Federation (OIDC) for cross-cloud auth, eliminating long-lived API keys entirely.
- GCP -> AWS: Cloud Run services bind AWS resources like SQS directly; the IAM role trusts accounts.google.com with the GCP service account as condition, no access keys in env vars.
- AWS -> GCP: Lambdas publish to GCP Pub/Sub using Workload Identity Pool/Provider instead of service account keys.
The upgrade is transparent to users and makes every Alchemy user's cross-cloud setup more secure with zero effort on their part.
More from coding & agent
- OpenAI, Anthropic, Alibaba, Hugging Face donate agent stack pieces to one open foundation — YvesMulkers · 2026-10-27
- DevSpeak MCP lets your coding agent polish PR descriptions and commit messages — modelcontextprotocol · 2026-10-27
- ThreadMind MCP gives AI agents a Git-like memory tree to cut token costs — mahmu_tech · 2026-10-27
- He let Claude design a complete e-ink business card, from schematic to product page — isaul32 · 2026-10-27
- The AI engineer job in 2023 vs 2026: one viral blank line — JafarNajafov · 2026-10-27
- DeepSeek Flash impresses dev: let it build its own tools, cheap enough to experiment — victormustar · 2026-10-27