Alchemy adds keyless AWS↔GCP auth via OIDC Identity Federation, drops service account keys

samgoodwin89 · x · 2026-11-03

Alchemy's AWS ↔ GCP bindings now use OIDC Identity Federation for secure "keyless" authentication across clouds, replacing long-lived service account keys with Workload Identity Pools/Providers and an IAM Member binding. GCP Cloud Run was also redesigned to better support sidecar setups, working with both ordinary images and Alchemy's Effectful Containers.

Original post →

More from coding & agent

coding & agent channel →