Enterprise AI Security on CoreWeave: IAM and Key Control

This post introduces two key security enhancements for AI workloads on CoreWeave: federated identity management and remote key encryption. CoreWeave IAM federates with existing enterprise Identity Providers (IdPs) via SAML and OIDC, enabling Automated User Provisioning (AUP) for continuous user and group synchronization. This extends to SUNK User Provisioning (SUP) for Slurm-on-Kubernetes clusters, automatically creating POSIX users, groups, and Slurm accounts. Remote Key Encryption (RKE) allows data at rest to be encrypted using keys managed externally by the customer's KMS or HSM. Encryption occurs client-side within the customer's trusted compute boundary, and CoreWeave only handles ciphertext. RKE supports automated key lifecycle management (rotation, expiration, revocation) by integrating with existing KMS/HSM infrastructure.