# iap — RSS Amplifier Recent posts from the 3 feeds in the RSS Amplifier directory that cover iap. Page: Feed: --- ## [IAP 430 Pt. 1 Al Di Meola: Music, Memory, and Italian Roots](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-430-pt-1-al-di-meola-music-memory-and-italian-roots) _2026-08-16 · The Italian American Podcast_ Grammy-winning guitarist Al Di Meola joins Jenna and Pat for a wide-ranging conversation about Italian heritage, family history, and his extraordinary musical career. They explore regional identity, genealogy, dual citizenship, and the immigration stories that connect generations of Italian Americans to their ancestral towns. Along the way, they reflect on the food and traditions rooted in… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_430_full.mp3?dest-id=4995890) ## [Authenticating to AWS by using a Google Cloud agent identity and AssumeRoleWithWebIdentity](https://jpassing.com/2026/08/17/authenticating-to-aws-by-using-a-google-cloud-agent-identity-and-assumerolewithwebidentity/) _2026-08-16 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ A long time ago, I wrote about how service accounts can authenticate to AWS by using AssumeRoleWithWebIdentity . To allow such federated authentication, we create an AWS role for Open ID Connect (OIDC) federation with Google as identity provider , and then tighten the role's trust policy so that it only allows role assumption if the incoming token meets certain requirements For example, to allow a… ## [IAP 429 The Wines of Southern Italy: Rediscovering Native Grapes and Ancient Traditions](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-429-the-wines-of-southern-italy-rediscovering-native-grapes-and-ancient-traditions) _2026-08-10 · The Italian American Podcast_ In this episode of the Italian American Podcast, John, Pat, and Mariana welcome wine writer and researcher Maria Liotta for a journey through the rich and often overlooked world of Southern Italian wine. Inspired by her encyclopedic work, Places of Origin: The Wines of Southern Italy, the conversation explores the wine traditions of Campania, Calabria, Basilicata, and Puglia, highlighting their… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_429_short-.mp3?dest-id=4995890) ## [IAP 428 Italian Roots, Family Traditions, and Breaking Generational Cycles with December Rose](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-428-italian-roots-family-traditions-and-breaking-generational-cycles-with-december-rose) _2026-08-04 · The Italian American Podcast_ In this episode of the Italian American Podcast, hosts John, Pat, Marcella, and Brandon welcome musician and content creator December Rose for a lively conversation about Italian Canadian and Italian American identity, family traditions, and the evolving experience of the diaspora. Drawing on her upbringing in Montreal to Sicilian and Abruzzese parents, December shares humorous stories about… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/JoeyTest_95_1_1.mp3?dest-id=4995890) ## [Letting users delegate access from Gemini Enterprise to Agent Platform, redux](https://jpassing.com/2026/07/30/letting-users-delegate-access-from-gemini-enterprise-to-agent-platform-redux/) _2026-07-30 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Gemini Enterprise lets us register ADK agents and make them available in the Gemini Enterprise app. When registering an agent, we can configure authorization . Gemini Enterprise then prompts users to perform an OAuth 2.0 authorization flow and forwards the resulting access token to the agent. The ADK lets agents read the forwarded access token from context.session.state , but doesn’t have… ## [Authenticating to Azure using an agent identity's JWT-SVID](https://jpassing.com/2026/07/29/authenticating-to-azure-using-an-agent-identity-jwt-svid/) _2026-07-28 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ When deploying an agent to Agent Platform, we can choose to assign it an agent identity instead of a service account. When the agent requests an ID token from the metadata server, it then no longer receives a Google-issued ID token. Instead, it receives a JWT-SVID that looks similar to the following when decoded: { "alg": "RS256", "kid": "78ab40e4a0319f9ced58024f5bb66e6387d68066", "typ": "JWT" }.{… ## [IAP 427 From Pizza Shop Hustles to Sneaker Success: The Story Behind Direct Kicks](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-427-from-pizza-shop-hustles-to-sneaker-success-the-story-behind-direct-kicks) _2026-07-26 · The Italian American Podcast_ In this episode of the Italian American Podcast, hosts John, Marcella, and Pat sit down with Louis Lacarbonara, owner of Direct Kicks, a buy, sell, and trade sneaker store in Westchester County, New York. Louis shares how his entrepreneurial mindset was shaped by working in his family's pizzeria and launching small ventures as a kid, from selling pizza slices and gum to classmates to reselling… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_427.mp3?dest-id=4995890) ## [IAP 426 Remembering Resistance: Andrew Novo's Where the Mountains Burn and Italy's Wartime Legacy](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-426-remembering-resistance-andrew-novos-where-the-mountains-burn-and-italys-wartime-legacy) _2026-07-20 · The Italian American Podcast_ In this episode of the Italian American Podcast, hosts Pat and Danielle Oteri welcome historian and author Andrew Novo to discuss his new novel, Where the Mountains Burn. The conversation begins with a lighthearted exchange about Italian heritage before turning to the importance of highlighting the intellectual, cultural, and historical contributions of Italian Americans beyond familiar… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/JoeyTest_105_2.mp3?dest-id=4995890) ## [IAP 425 | Bridging Two Worlds: Addison Basile on Language, Identity, and Italian American Culture](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-425-bridging-two-worlds-addison-basile-on-language-identity-and-italian-american-culture) _2026-07-11 · The Italian American Podcast_ In this episode of the Italian American Podcast, hosts John and Pat welcome Addison Basile, a Georgetown graduate, Fulbright Scholar, and linguistics and psychology major, to discuss her passion for Italian language and culture. The conversation explores Italian American identity, the role of language in shaping belonging, and how Addison even used the podcast itself as part of her linguistic… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_425_FULL_1_DONEEEEEE_1.mp3?dest-id=4995890) ## [IAP 424 Larry Ruvo on Family, Philanthropy, and the Fight Against Alzheimer's](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/larry-ruvo-on-family-philanthropy-and-the-fight-against-alzheimers-iap-424) _2026-07-05 · The Italian American Podcast_ The Italian American Podcast welcomes Larry Ruvo for a heartfelt conversation with hosts Marcella Martin and Pat. The episode begins by exploring Ruvo's family story, tracing the journey of his Italian Canadian and Italian American parents from Niagara Falls to Las Vegas, where they opened the Venetian Pizzeria, the city's first pizzeria. Along the way, Ruvo shares colorful memories of family… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_424_audio.mp3?dest-id=4995890) ## [Find what they just said (Sponsored)](https://crawlproof.com/a/Z20Cdw1Ufozn) _2026-07-05 · **Sponsored**_ Surface recent public signals so you can send policy-aware, relevant outreach ## [Best practices for using Workforce Identity Federation](https://jpassing.com/2026/06/30/best-practices-for-using-workforce-identityif-ederation/) _2026-06-30 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ When federating Google Cloud with an identity provider like Entra, we need to decide whether to set up single sign-on using Cloud Identity/Workspace or whether to use Workforce Identity Federation. Which approach works best depends on a number of factors, but these factors aren’t always obvious. In a new set of articles published on the Google Cloud website, I’m trying to shed some light on… ## [IAP 423 Joe DiMaggio's 56-Game Hitting Streak: Baseball's Unbreakable Record?](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-423-joe-dimaggios-56-game-hitting-streak-baseballs-unbreakable-record) _2026-06-28 · The Italian American Podcast_ In this episode of the Italian American Podcast, hosts John and Pat are joined by Dan Marucci for a discussion of Joe DiMaggio's legendary 56-game hitting streak and its enduring place in both baseball history and Italian American culture. The conversation explores why many consider the record unbreakable and how DiMaggio became a source of pride for generations of Italian Americans. The hosts… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_423_AUDIO.mp3?dest-id=4995890) ## [IAP 422 A.P. Giannini: The Italian American Who Helped Build Modern America](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-422-ap-giannini-the-italian-american-who-helped-build-modern-america) _2026-06-21 · The Italian American Podcast_ Few Italian Americans have shaped the United States as profoundly as A.P. Giannini, yet his name remains largely absent from the national conversation. In this episode of the Italian American Podcast, Pat, Marianna, and award-winning filmmaker Davide Fiore explore the remarkable life and legacy of the founder of the Bank of Italy, which later became Bank of America. Through the lens of Fiore's… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/Podcast_422_modified.mp3?dest-id=4995890) ## [IAP 421 Tailoring, Tradition, and the Craftsmanship of Naples](https://b9e38f9a-9ee5-463d-9945-36e748a4e603.libsyn.com/iap-421-tailoring-tradition-and-the-craftsmanship-of-naples) _2026-06-13 · The Italian American Podcast_ In this episode of the Italian American Podcast, Pat and Marcella welcome Nico Radano for an engaging conversation about Italian heritage, Neapolitan tailoring, bespoke menswear, and the enduring legacy of Italian craftsmanship. From family roots in Cilento to the cultural traditions of Naples, Nico shares how his background inspired him to leave a career in biotechnology and launch a clothing… [Listen](https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/b9e38f9a-9ee5-463d-9945-36e748a4e603/podcast_421_AUDIO.mp3?dest-id=4995890) ## [AI Agent Authenticator, a new tool to simplify delegating access to Gemini Enterprise agents](https://jpassing.com/2026/03/30/aauth-a-new-tool-simplify-delegating-access-to-gemini-enterprise-agents/) _2026-03-29 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Gemini Enterprise lets us register custom ADK agents that run on Vertex AI Agent Engine. Once registered, users can find those agents in the Gemini Enterprise app and interact with them using chat. To do anything meaningful, most ADK agents need to interact with other APIs and services – MCP servers, Google Cloud APIs, custom applications deployed on Google Cloud or elsewhere. These APIs need… ## [Letting users delegate access from Gemini Enterprise to Agent Engine](https://jpassing.com/2026/01/27/letting-users-delegate-access-from-gemini-enterprise-to-agent-engine/) _2026-01-27 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Update : See here for an updated version of this post. Gemini Enterprise now supports registering custom ADK agents that run on Vertex AI Agent Engine. Once connected, Gemini Enterprise users can discover and interact with these agents via chat. As these ADK agents are chat-based, they generally fit the notion of an “assistant” or “interactive agent”: they operate in a… ## [The many types of tokens used by Google Cloud](https://jpassing.com/2025/09/04/the-many-types-of-tokens-used-by-google-cloud/) _2025-09-03 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Google Cloud uses token-based authentication to secure its APIs. But there’s more than one way to obtain a token, and there are well over a dozen different types of tokens. In a new set of articles on the Google Cloud website, I dive into the different types of tokens, their security properties, purposes, and ways to obtain them: Token overview describes how user authentication differs from… ## [Managing break-glass access to Google Cloud](https://jpassing.com/2025/08/12/managing-break-glass-access-to-google-cloud/) _2025-08-12 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Emergency access users tend to be highly privileged and as such, require robust protection through measures like multi-factor authentication or context-aware access. However, this protection also increases the risk of being unable to utilize them during an actual emergency. In a new article, Best practices for continuous access to Google Cloud , I outlined some strategies for balancing the need to… ## [Using JIT Groups to manage just-in-time, self-service access to Kubernetes resources](https://jpassing.com/2025/07/23/using-jit-groups-to-manage-just-in-time-self-service-access-to-kubernetes-resources/) _2025-07-23 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Although Kubernetes resources are best managed using infrastructure-as-code (IaC), it’s sometimes useful to be able to interact with the cluster directly – whether that’s for diagnostics or other purposes. However, as with any other access, it’s best to grant such access only when needed and to let it auto-expire when it’s no longer required. One option to manage… ## [Securing apps and resources on Google Cloud using context-aware access](https://jpassing.com/2025/07/22/securing-apps-and-resources-on-google-cloud-using-context-aware-access/) _2025-07-21 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Context-aware access is Google’s approach to zero trust. Using context-aware access, we can protect access to the Google Cloud Console, APIs, VMs, Workspace, and many other resources in a way that not only takes the user’s identity into account, but also other factors such as their location, browser, and device posture. However, context-aware access isn’t a singular service or… ## [Reach prospects with real signals (Sponsored)](https://crawlproof.com/a/jaT7cA88Arf9) _2025-07-20 · **Sponsored**_ Find prospects talking about your problem and get context-backed moments to engage ## [Using domain-wide delegation without service account keys, Java edition](https://jpassing.com/2025/03/26/using-domain-wide-delegation-without-service-account-keys-java-edition/) _2025-03-26 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Before we can call a Google API, we have to obtain an OAuth access token. As we learned before, there are different types of access tokens , and service account access tokens are a little different from user access tokens . The vast majority of Google Cloud APIs don’t discriminate between these two types of token and work with both. But beyond Google Cloud, there are still many Google APIs… ## [Given an OAuth Client ID, how to find the corresponding Google Cloud project](https://jpassing.com/2025/03/25/given-an-oauth-clientid-how-to-find-the-corresponding-google-cloud-project/) _2025-03-25 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Given an OAuth client ID such as 1234567890-9iuxy238472ny4qmfad0ppg77s61vabo14j0s.apps.googleusercontent.com , how can we find out which Google Cloud project the OAuth client belongs to? If we look closely at OAuth client IDs, we notice that they follow a common pattern: NUMBER-GIBBERISH.apps.googleusercontent.com This pattern isn’t a coincidence: NUMBER is the project number of the Google Cloud… ## [Using Workforce Identity Federation and Entra App roles to control access to Google Cloud](https://jpassing.com/2025/03/20/using-workforce-identity-federation-and-entra-approles-to-control-access-to-google-cloud/) _2025-03-20 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ Google Cloud IAM implements discretionary access control , meaning each resource - be it a folder, project, or VM - has an IAM policy. We can think of this policy as an access control list, outlining who can access the resource and what actions they’re permitted to take. This model is extremely flexible. But as we scale, management can become a challenge: As the number of resources, IAM… ## [JIT Groups, or what's next for the JIT Access project](https://jpassing.com/2024/09/06/jit-groups-or-whats-next-for-the-jit-access-project/) _2024-09-05 · Posts on Identity, access, and stuff - Johannes Passing's blog about IAM_ The primary focus of JIT Access has been privileged access management (PAM) – enabling users to request just-in-time privileged access to Google Cloud projects on a temporary basis. When I published the project in 2022, Google Cloud didn’t provide any such capabilities as part of the platform, so the project filled an important gap. With Privileged Access Manager in preview now, that…