signal-works/cheatingchelsea
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Use CC_OIDC_ROLE secret for AWS role ARN

Browse source 
- Replace hardcoded AWS role ARN with CC_OIDC_ROLE secret
- Improves security by not exposing AWS account details in workflow
- Makes the workflow more portable and configurable
This commit is contained in:
Derek Slenk 2025-06-29 17:52:44 -04:00
parent cb164b8255
commit 9619cf2bf9
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/nextjs.yml vendored
View file

@ -56,7 +56,7 @@ jobs:
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::499518182498:role/cheatingchelsea-github-deployment
role-to-assume: ${{ secrets.CC_OIDC_ROLE }}
aws-region: us-east-2
- name: Deploy to S3