Switch from OIDC to access key authentication in deploy-scripts workflow
- Remove id-token write permission - Replace role-to-assume with aws-access-key-id and aws-secret-access-key - Remove role-session-name parameter 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
parent
f4d3f58f74
commit
08b1d37982
1 changed files with 3 additions and 4 deletions
|
@ -9,7 +9,6 @@ on:
|
|||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
id-token: write
|
||||
contents: write
|
||||
pull-requests: write
|
||||
|
||||
|
@ -21,12 +20,12 @@ jobs:
|
|||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Configure AWS credentials using OIDC
|
||||
- name: Configure AWS credentials using access keys
|
||||
uses: aws-actions/configure-aws-credentials@v4
|
||||
with:
|
||||
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
|
||||
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
||||
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
||||
aws-region: ${{ secrets.AWS_REGION }}
|
||||
role-session-name: icewatch-deploy-scripts
|
||||
|
||||
- name: Upload deployment script to S3
|
||||
run: |
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue