To address ephemeral identities, the industry's approach is to replace static credentials with dynamic credentials, where workloads temporarily request short-lived tokens from a credential authority at runtime.