Developer Builds Keyless Multi-Cloud AI Agent System Using Federated Identity Tokens

·2 views

A developer has published an open-source project connecting three AI agents — built with Google ADK, AWS Strands, and Azure Agent Framework — each running on their respective cloud platforms. A central coordinator hosted on Google Cloud Run orchestrates all three agents using the A2A v1.0 protocol, routing requests and aggregating responses. The system avoids storing long-lived credentials entirely by relying on short-lived identity tokens minted at request time through each cloud's federated identity mechanism. Cloud Run was chosen as the coordinator host because its metadata server can natively mint OIDC tokens trusted by AWS IAM and Azure Entra, a capability not equally available on competing runtimes. The project, available on GitHub, highlights that keyless cross-cloud authentication is achievable but requires careful handling of audience values, subject pinning, and platform-specific IAM quirks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Shares Beginner Python Calculator Project to Practice Loops

A developer on DEV Community has shared a Python-based calculator project aimed at beginners looking to apply foundational programming skills. The project uses loops and conditional statements to handle a range of operations, including basic arithmetic, power, modulus, square root, logarithm, and trigonometric functions. The author noted that many projects labeled 'beginner-friendly' online can still be overwhelming for newcomers, and designed this as a more accessible starting point. The calculator accepts user input via the terminal and returns results using Python's built-in math library. The project is intended to bridge the gap between learning Python theory and applying it through hands-on practice.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why AI Security Training for Defense Contractors Demands a Specialized Approach

Defense industrial base companies are increasingly deploying AI tools such as copilots and retrieval-augmented generation pipelines, but many of these systems interact with controlled unclassified information in ways existing regulations like DFARS 252.204-7012 and CMMC Level 2 did not anticipate. The most common security failure is not a sophisticated cyberattack but an employee pasting sensitive defense information into a general-purpose AI chatbot, which constitutes a data spillage event. Standard network security reviews cannot detect these CUI flow violations because AI prompts, retrieval contexts, and inference logs do not resemble traditional file transfers. Training delivery poses its own challenge, as courses for personnel in classified or air-gapped facilities must run entirely offline, requiring all model weights and dependencies to be pre-packaged without relying on external APIs or package managers. Additionally, downloaded AI model checkpoints carry software supply chain risks, since PyTorch's default pickle-based serialization can execute arbitrary code on load, making weight verification and secure formats like safetensors an essential part of any DIB AI security program.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

LangGraph, CrewAI, and Google ADK: How to Pick the Right AI Agent Framework

As AI agents move from experiments into production systems, developers face a critical architectural choice among three leading frameworks: LangGraph, CrewAI, and Google ADK. LangGraph centers on explicit graph-based orchestration with stateful execution, giving developers fine-grained control over nodes, transitions, retries, and human approval steps. CrewAI organizes work around specialized collaborative agents grouped into Crews, while also offering event-driven Flows for structured, deterministic orchestration. Google ADK focuses on agents, tools, and workflow mechanisms tightly integrated with the Google ecosystem, emphasizing deployment and operations. The key question for teams is not which framework is universally best, but which orchestration model best matches the specific production system being built.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Dynamic Programming Explained Through the Classic House Robber Problem

Dynamic programming (DP) is a technique that solves complex problems by breaking them into smaller overlapping sub-problems and storing their results to avoid redundant computation. The classic House Robber problem — finding the maximum money stealable from non-adjacent houses — illustrates this well, as a brute-force approach runs in O(2ⁿ) time and becomes impractical beyond ~50 elements. The key insight is that the optimal choice at any house depends only on the results from the previous two houses, yielding the recurrence dp[i] = max(dp[i-1], dp[i-2] + nums[i]). This reduces time complexity to O(n) and, by tracking just two variables instead of a full array, space complexity to O(1). The problem appears as LeetCode 198 and serves as a foundational example for learning DP patterns.

0 comments Read more at DEV Community