Merge pull request github#25415 from github/repo-sync

Octomerger · web-flow · commit cdde0a765beb · 2022-02-16T03:22:32.000-08:00
repo sync
diff --git a/content/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services.md b/content/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services.md
@@ -42,7 +42,8 @@ Edit the trust relationship to add the `sub` field to the validation conditions.
 
 ```json{:copy}
 "Condition": {
-  "StringEquals": {
+  "ForAllValues:StringEquals": {
+    "token.actions.githubusercontent.com:aud": "sts.amazonaws.com",
     "token.actions.githubusercontent.com:sub": "repo:octo-org/octo-repo:ref:refs/heads/octo-branch"
   }
 }

Original file line number	Diff line number	Diff line change
@@ -42,7 +42,8 @@ Edit the trust relationship to add the `sub` field to the validation conditions.
`42`	`42`
`43`	`43`	```json{:copy}
`44`	`44`	`"Condition": {`
`45`		`- "StringEquals": {`
	`45`	`+ "ForAllValues:StringEquals": {`
	`46`	`+ "token.actions.githubusercontent.com:aud": "sts.amazonaws.com",`
`46`	`47`	`"token.actions.githubusercontent.com:sub": "repo:octo-org/octo-repo:ref:refs/heads/octo-branch"`
`47`	`48`	`}`
`48`	`49`	`}`