oidc 2 Amazon Cognito and Verified Permissions — App Identity and Fine-Grained Authorization Jul 1, 2026 Lab — CI/CD Pipeline Attack: GitHub Actions Secret Theft and OIDC Hardening Jun 26, 2026