Skip to content

Commit 69982b7

Browse files
committed
use the assumable role
1 parent 1b1375a commit 69982b7

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

.github/workflows/deploy-dev.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,9 @@ jobs:
2626
run: make test_unit
2727
deploy-dev:
2828
runs-on: ubuntu-latest
29+
permissions:
30+
id-token: write
31+
contents: read
2932
concurrency:
3033
group: ${{ github.event.repository.name }}-dev-env
3134
cancel-in-progress: false
@@ -50,8 +53,8 @@ jobs:
5053
python-version: 3.11
5154
- uses: aws-actions/configure-aws-credentials@v2
5255
with:
53-
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
54-
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
56+
role-to-assume: arn:aws:iam::427040638965:role/GitHubActionsRole
57+
role-session-name: Core_Dev_Deployment
5558
aws-region: us-east-1
5659
- name: Publish to AWS
5760
run: make deploy_dev

0 commit comments

Comments
 (0)