<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>KMS on SILO</title>
    <link>https://silo.pgsty.com/tags/kms/</link>
    <description>Recent content in KMS on SILO</description>
    <generator>Hugo</generator>
    <language>en</language>
    
    
    
      <lastBuildDate>Sat, 24 Oct 2026 18:19:49 +0800</lastBuildDate>
    
    
      <atom:link href="https://silo.pgsty.com/tags/kms/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
        <title>IAM Policy Reloads: Lock Scope, Cancellation, and Time Budgets</title>
        <link>https://silo.pgsty.com/blog/design/iam-policy-cancellation/</link>
        <pubDate>Fri, 23 Oct 2026 00:00:00 +0000</pubDate>
        
        <guid>https://silo.pgsty.com/blog/design/iam-policy-cancellation/</guid>
        <description>Why a slow policy list blocked ordinary S3 authentication, how request cancellation was lost before reaching KES, and why fixing context propagation required separating etcd read timeouts from decryption budgets.</description>
      </item>
    
  </channel>
</rss>
