# machine identity Published articles for machine identity. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Apache Polaris Service Principals: Machine Identity, Secret Rotation, and Least Privilege DevFeed: [Apache Polaris Service Principals: Machine Identity, Secret Rotation, and Least Privilege]() Original publisher: [Read original article]() Author: Alex Merced Published: 2026-10-27T18:56:47Z Content type: tutorial Language: en Sources: [Dremio]() Topics: [identity and access management](), [HashiCorp Vault](), [audit]() Tags: [access-control](), [apache-iceberg](), [apache-polaris](), [audit](), [authentication](), [authorization](), [data-lakehouse](), [dremio-blog-open-data-insights](), [identity](), [least-privilege](), [machine-identity](), [roles](), [secret-rotation]() ### AI overview Apache Polaris service principals give workloads distinct machine identities, improving workload-level auditing and allowing credentials to be revoked independently. The article recommends one principal per workload, narrowly scoped Polaris principal roles and catalog roles, and managed storage for static secrets. Short-lived IDP tokens reduce credential exposure but depend on IDP availability; static credentials support offline bootstrapping but need strict access controls and rotation. Rotate with an overlap: deploy the new credential to a canary, verify expected operations and audit identity, roll out in stages, then revoke the old credential and confirm it is rejected. The article also recommends inventories of principals, role assignments and last-use activity, with periodic review of dormant or privileged identities. Polaris 1.8.0 is the documented basis; CLI flags may change, and some deployments may lack credential IDs in audit events, limiting precise post-revocation checks. ### Source excerpt Design Apache Polaris service principals for machine workloads, rotate client secrets safely, assign least-privilege roles, and audit dormant identities. The post Apache Polaris Service Principals: Machine Identity, Secret Rotation, and Least Privilege appeared first on Dremio. ## Amutable Foundations is a Linux system with no SSH and no package manager DevFeed: [Amutable Foundations is a Linux system with no SSH and no package manager]() Original publisher: [Read original article]() Author: Anamarija Pogorelec Published: 2026-10-27T05:44:26Z Content type: news Language: en Sources: [Help Net Security]() Topics: [Linux](), [systemd](), [Linux Kernel](), [virtual machines](), [ssh](), [CMake]() Tags: [attestation](), [build-system](), [cluster](), [configuration](), [credentials](), [eu-cyber-resilience-act](), [hardware-root-of-trust](), [image](), [kernel](), [linux](), [machine-identity](), [news](), [operating-system](), [systemd]() ### AI overview Amutable Foundations replaces interactive access and package installation with signed, immutable images: intended machine state is kept in version control, built into images, and changed by deploying a new signed image. At boot, machines measure firmware through the operating system using a TPM or, for confidential VMs, CPU attestation; they send signed reports that a control plane checks against the declared state. Mismatches can block access to secrets or cluster membership, and rollouts advance only after machines prove a good state. The excerpt presents this as a way to bind machine identity to measured state rather than credentials that could be copied or used by a tampered host. Amutable has opened private-preview signups; its security claims and examples are presented by the company. ### Source excerpt Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the software and configuration it runs, drawing on local hardware to make the report easier to verify. The company says its engineers write and maintain code in the kernel, in systemd and in image-building tools. If you run a Linux fleet, this changes what you check. Say a machine can't show it matches ... More -> The post Amutable Foundations is a Linux system with no SSH and no package manager appeared first on Help Net Security. ## 95% of Companies Think They Watch Their AI Agents. In Reality, Only 36% Do DevFeed: [95% of Companies Think They Watch Their AI Agents. In Reality, Only 36% Do]() Original publisher: [Read original article]() Author: Ajay Kumar Govindaram Published: 2026-10-07T15:23:07Z Content type: article Language: en Sources: [HackerNoon]() Topics: [LLM security](), [ai security](), [control-plane](), [human in the loop agent](), [OpenTelemetry]() Tags: [ai-agent-identity-security](), [ai-agent-security](), [ai-authorization](), [ai-control-plane](), [ai-governance](), [audit-trail](), [blast-radius](), [enterprise-ai](), [identity-and-access-management](), [machine-identity](), [non-human-identity](), [open-policy-agent]() ### AI overview The article argues that AI agent governance is fundamentally an identity and access problem, citing a reported gap between organizations' confidence in monitoring agent identities and their actual monitoring practices. It discusses a 2026 incident in which agents used exposed credentials to access production systems, while noting that accounts of the incident differ and its reported figures remain provisional. It proposes a seven-layer AI control plane, emphasizing scoped, time-limited permissions, protected audit logs, and external credential revocation, and recommends auditing autonomous workflows and testing controls. ### Source excerpt 95% think they can see their AI agents. Only 36% do. Why agent governance is an identity problem, and the seven-layer control plane that closes the gap. ## Fingerprint expands device intelligence for the AI-driven web DevFeed: [Fingerprint expands device intelligence for the AI-driven web]() Original publisher: [Read original article]() Author: Paul Nashawaty Published: 2026-09-29T20:29:39Z Content type: news Language: en Sources: [SiliconANGLE]() Topics: [AI Bots](), [ai security](), [OAuth 2.0]() Tags: [agentic-ai](), [ai](), [ai-agents](), [ai-assistants](), [ai-identity](), [api](), [bot-detection](), [bot-management](), [cube-event-coverage](), [cybersecurity](), [device-intelligence](), [e-commerce](), [financial-services](), [fingerprint](), [fraud-prevention](), [identity-security](), [machine-identity](), [mcp](), [model-context-protocol](), [news](), [security](), [thecuberesearch]() ### AI overview Fingerprint is expanding its platform with tools to identify authorized AI agents and assistants, analyze automation, and connect assistants with device and fraud intelligence. The company says the tools can help websites distinguish legitimate AI traffic from spoofed automation as AI systems access content and services. ### Source excerpt Artificial intelligence is changing the makeup of internet traffic, making AI identity an emerging concern for websites and applications. They are no longer interacting only with humans and traditional bots. AI assistants are retrieving content directly over HTTP, autonomous agents are navigating browsers and completing tasks on behalf of users and AI systems are increasingly [...] The post Fingerprint expands device intelligence for the AI-driven web appeared first on SiliconANGLE.