IAM, Agent: Identity for Autonomous AI
Talkat KubeCon + CloudNativeCon Europe 2025 · on Thursday, 2025-04-03· at 11:45· Level 1 | Hall Entrance S10 | Room C·
summary
Prototype chat agent calls two tools (get_orders, get_order_details) via Langraph and Gemini Flash on Vertex AI and successfully returns order data in the demo. Long‑lived provider tokens are replaced with short‑lived cryptographic identities using Spiffe/Spire (X.509 or JWT‑SVID) and Envoy/SDS for TLS. User identity is attenuated via Dex + a minted transaction token pattern so agents don’t inherit full user privileges. Remaining gaps include cross‑trust‑domain propagation and emerging standards like WIMSE.
AI-written summary · about
chapters (8)
- 0:00AI agents and workload identity
- 6:19Customer service AI agent prototype
- 9:50AI agent deployment risks
- 12:38SPIFFY for workload identity in CNCF
- 19:00Securing agent-tool interactions with SPIFFY
- 23:33User identity integration with agents
- 26:19Transaction tokens for authorization
- 30:16Summary and future challenges
related talks
17mDon't give your agent the master key
20mCIAM for AI: Authn/Authz for Agents
35mIdentity and Access Management for the Decade Ahead
23mWho is Calling? Identity for Agents with AAuth
40mASI Workshop
22mIdentity + AI = Intelligent Applications 
25mSecuring Non-Human Identities: A Defense-in-Depth Blueprint for AI Agents
19mDon't give your agent the master key