Modern cloud environments depend heavily on CI/CD pipelines to deploy infrastructure, applications, and updates quickly. Over time, these pipelines often end up with far more access than they actually need, along with long-lived credentials and permissions spread across multiple cloud services.

In this talk, we look at how CI/CD systems can quietly become one of the biggest identity risks in cloud environments. Using practical examples, we go through common issues like static secrets in pipelines, overly permissive service accounts, and automation workflows with unrestricted access.

We also explore ways to reduce this risk using approaches such as short-lived credentials, identity federation, workload identity, and least-privilege access.

The goal is to show why deployment pipelines should be treated as highly privileged identities, not just automation tools, and how teams can secure them without slowing down development.