Key Protection ● SDS (Secret Discovery Service) ● A stricter security model ○ Protections for inline components & workflows ○ Trust model augmentation ■ Impersonating ■ Secret clear in memory ■

cluster_not_found_response_code: "SERVICE_UNAVAILABLE" } http_filters: - name: envoy.lua config: inline_code: | function urldecode(s) 41 | Google Istio Security Assessment Google / NCC Group Confidential