Developer Builds Keyless Multi-Cloud AI Agent System Using Federated Identity Tokens

·1 views

A developer has built a multi-cloud AI system in which three agents — built on Google ADK, AWS Strands, and Azure Agent Framework — run on their respective cloud platforms and are coordinated via the A2A v1.0 protocol. The coordinator agent runs on Google Cloud Run, which can mint short-lived OIDC identity tokens to authenticate with AWS and Azure without storing any long-lived credentials. AWS accepts these tokens via STS AssumeRoleWithWebIdentity, while Azure validates them through Entra Federated Identity Credentials, meaning each cross-cloud call uses a freshly minted token. The developer notes that Cloud Run's ability to natively mint workload identity tokens gives it a structural advantage as a coordinator host over AWS AgentCore or Azure Container Apps. The full project code is publicly available on GitHub, and the author highlights several subtle misconfiguration pitfalls around audience, subject pinning, and IAM condition key naming across the three platforms.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Shares Beginner Python Calculator Project to Practice Loops

A developer on DEV Community has shared a Python-based calculator project aimed at beginners looking to apply foundational programming skills. The project uses loops and conditional statements to handle a range of operations, including basic arithmetic, power, modulus, square root, logarithm, and trigonometric functions. The author noted that many projects labeled 'beginner-friendly' online can still be overwhelming for newcomers, and designed this as a more accessible starting point. The calculator accepts user input via the terminal and returns results using Python's built-in math library. The project is intended to bridge the gap between learning Python theory and applying it through hands-on practice.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Anthropic Publishes Research on Claude's Mathematical Reasoning Capabilities

Anthropic has released new research examining the mathematical capabilities of its AI model, Claude, with a focus on complex topics such as the Riemann zeta function. The study appears to explore how well Claude can handle advanced mathematical reasoning and problem-solving. The research was shared on Anthropic's official website and drew attention from the Hacker News community. While the post received modest engagement, it signals Anthropic's ongoing interest in benchmarking and understanding the technical limits of its AI systems.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Why AI Security Training for Defense Contractors Demands a Specialized Approach

Defense industrial base companies are increasingly deploying AI tools such as copilots and retrieval-augmented generation pipelines, but many of these systems interact with controlled unclassified information in ways existing regulations like DFARS 252.204-7012 and CMMC Level 2 did not anticipate. The most common security failure is not a sophisticated cyberattack but an employee pasting sensitive defense information into a general-purpose AI chatbot, which constitutes a data spillage event. Standard network security reviews cannot detect these CUI flow violations because AI prompts, retrieval contexts, and inference logs do not resemble traditional file transfers. Training delivery poses its own challenge, as courses for personnel in classified or air-gapped facilities must run entirely offline, requiring all model weights and dependencies to be pre-packaged without relying on external APIs or package managers. Additionally, downloaded AI model checkpoints carry software supply chain risks, since PyTorch's default pickle-based serialization can execute arbitrary code on load, making weight verification and secure formats like safetensors an essential part of any DIB AI security program.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

LangGraph, CrewAI, and Google ADK: How to Pick the Right AI Agent Framework

As AI agents move from experiments into production systems, developers face a critical architectural choice among three leading frameworks: LangGraph, CrewAI, and Google ADK. LangGraph centers on explicit graph-based orchestration with stateful execution, giving developers fine-grained control over nodes, transitions, retries, and human approval steps. CrewAI organizes work around specialized collaborative agents grouped into Crews, while also offering event-driven Flows for structured, deterministic orchestration. Google ADK focuses on agents, tools, and workflow mechanisms tightly integrated with the Google ecosystem, emphasizing deployment and operations. The key question for teams is not which framework is universally best, but which orchestration model best matches the specific production system being built.

0 comments Read more at DEV Community