Product Manager in Microsoft Security team. Focusing on Identity and Network Access, Zero Trust
Berlin
Joined December 2009
- Tweets649
- Following279
- Followers508
- Likes241
Give #AIAgents one identity provider and one policy and governance engine. Bring legacy apps in as #MCP tools through an #AIGateway that bridges identity domains without becoming another identity provider.
dev.to/astaykov/the-overdue-…
15
I appreciate how our Microsoft Threat Intelligence team is helping us understand AI-driven threats: msft.it/6012aAwcy
12
Finance teams can spend less time pulling work together and more time applying their expertise.
I’m excited to see our Microsoft Copilot platform expand with 25+ finance skills and plugins: msft.it/6014a4t0w
23
#ResponsibleAI principles already influence some training methods. The harder question is what models learn when those principles conflict with completing a task. #AIGovernance should demand evidence that stopping can count as success.
dev.to/astaykov/we-have-prin…
42
#OAuth identifies both the represented subject and the client. If your API needs agent-specific restrictions, its policy must use that distinction; #EntraAgentID claims add context, not permission.
dev.to/astaykov/back-to-the-…
1
26
Stronger AI deployments start with understanding risk in context.
Our Microsoft Security team and NVIDIA outline five risk categories for open-weight models: msft.it/6017aIrJ5
I value the emphasis on evaluating the model and surrounding system.
34
Cross-domain #OAuth token exchange does not remove multi-provider risk or dual client registration. It only removes the boundary prompt while wiring a silent compromise path across your identity estate.
dev.to/astaykov/to-exchange-…
An AI agent kill switch is a procedure, not token revocation. Stopping #AIAgents means blocking model and tool paths, containing execution and verifying the result; an #APIGateway is one enforcement point, not the whole procedure.
dev.to/astaykov/the-ai-agent…
30
More efficient AI infrastructure can support increasingly demanding workloads.
Our EVP of Cloud + AI, Scott Guthrie, shares how we’re approaching that challenge: msft.it/6015aSyyv
Maia 300 is designed for long-context reasoning and multi-step agentic tasks.
43
In #MicrosoftEntra, synced #Passkeys on an employee's own phone avoid the cross-device detour. #Passwordless phone sign-in is not the same method; bootstrap registration before enforcing passkey access.
dev.to/astaykov/to-passkey-o…
26
#A2A standardizes how agents communicate. It does not replace authorization. In v3 of my #AWS #AgentCore, Blueprint 2 uses #EntraAgentID scopes and app roles to separate delegated tools from autonomous chat.
dev.to/astaykov/agent-to-age…
1
40
TLS protects each hop, not the trust boundary. A gateway can inspect prompts before they reach a model. Unsanctioned #GenAI is a #CyberSecurity problem because the organization no longer controls the data lifecycle. dev.to/astaykov/encryption-i…
35
Admin consent delegation is not a trade-off between a central queue and broad directory roles. #MicrosoftEntra app consent policies can bound a custom role to an approved permission envelope, so #AIAgents scale without multiplying standing privilege.
dev.to/astaykov/flexibility-…
39
Microsoft Graph least privilege is not just a smaller permission. #MicrosoftGraph consent and #MicrosoftEntra ownership are separate control planes. If you govern only scopes, owners can still change an application's blast radius. dev.to/astaykov/microsoft-gr…
42
An AWS-hosted #EntraAgentID does not need an Entra client secret. With #WorkloadIdentity federation, AWS STS issues a short-lived assertion that Entra validates before the Agent ID token exchange. dev.to/astaykov/how-an-aws-h…
1
2
92
Consent is the start of agent authorization, not the whole model. With #Entra #AgentID, user assignment, #ConditionalAccess, app roles, group claims and access packages govern different boundaries.
dev.to/astaykov/authorizatio…
1
2
845
Knowing what an app can access is not the same as seeing what it does. #AppGovernance in #DefenderForCloudApps connects #OAuth app permissions with activity and risk signals. Check the capability you may already own.
learn.microsoft.com/en-us/de…
44
An API gateway that mints identity is an authorization server, whether you govern it as one or not. Count it, govern it, then fund getting it out of the identity business.
dev.to/astaykov/your-api-gat…
160
Anton Staykov retweeted
. @Thomas_Live shows live the cool features come with attack path analysis integrated in #DefenderforCloud and shows the possibilities in #DefenderforCSPM.
#AzureBonn goes #GlobalAzure
Anton Staykov retweeted
Am 10. April findet ein ganz besonderes #AzureBonn meetup im Microsoft Office Köln statt. Wir freuen uns auf @astaykov, Thomas Detzner und @PeterLenzke. An dem Abend wird sich alles um #GlobalSecureAccess drehen mit einer spannende Session und Roundtable.
meetup.com/azure-bonn-meetup…
