Academy
What is a workload identity?
Glossary · AI agent and machine identity security
Short answer
A workload identity is an identity assigned to running software, such as a container or function, instead of to a person.
Why it matters
It lets software authenticate without a long-lived password. The access it receives still needs to match what the workload does.
What it looks like
A Kubernetes pod that assumes a cloud role to read from a queue.
In nerl0
Workload identities appear in the map next to agents and service accounts, with the roles they can assume. See Connectors.