Workload Identity With Short-Lived Tokens