Features downscoping with credential access boundaries (#702) (aa7ede1) Bug Fixes add validation for the token URL and service account impersonation URL for Workload Identity Federation (#717) (23cb8ef) Documentation updates README for downscoping with CAB (#716) (68bceba)