Switch from OIDC to access key authentication in deploy-scripts workflow

- Remove id-token write permission
- Replace role-to-assume with aws-access-key-id and aws-secret-access-key
- Remove role-session-name parameter

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Claude Code 2025-07-06 16:38:47 -04:00
parent f4d3f58f74
commit 08b1d37982

View file

@ -9,7 +9,6 @@ on:
workflow_dispatch:
permissions:
id-token: write
contents: write
pull-requests: write
@ -21,12 +20,12 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4
- name: Configure AWS credentials using OIDC
- name: Configure AWS credentials using access keys
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION }}
role-session-name: icewatch-deploy-scripts
- name: Upload deployment script to S3
run: |