Last week in security news: Using AWS role session tags for GitHub Actions, A summary of the Okta hack is pretty damning, IAM Roles Anywhere with an external certificate authority, and more!

Links:

• I like this writeup of using AWS role session tags for GitHub Actions but I hate that I have to use Cognito to pull it off.
• This summary of the Okta hack is pretty damning.
• AWS Digital Sovereignty Pledge: Announcing a new, independent sovereign cloud in Europe 
• IAM Roles Anywhere with an external certificate authority 
• The key line from this 2018 post remains true: access to the root email and phone number is equivalent, if not more powerful, than the root password and MFA!