How I Removed AWS Access Keys from GitLab CI/CD with OIDC

The article discusses how to remove permanent AWS access keys from GitLab CI/CD by implementing OIDC federation between GitLab and AWS. This allows GitLab pipelines to access AWS without storing any permanent AWS credentials. The process involves GitLab proving its identity to AWS using a short-lived OIDC token, which is then verified by AWS and returns temporary credentials. This eliminates the need to store and rotate permanent credentials. The article also covers the configuration of OIDC provider using Terraform and the IAM trust relationship.