Network Proximity Is Not Identity: How Services Authenticate Without Ambient Authority
Most service-to-service trust comes from network location, not cryptographic proof.
Your microservices share a VPC, so they trust each other. That trust is ambient authority: the permission to invoke a service is granted not by cryptographic…