Allow s3Location as Document, Image, and Video #2320

	name: Secure Integration test

	on:
	pull_request_target:
	branches: [main]
	merge_group: # Run tests in merge queue
	types: [checks_requested]

	jobs:
	authorization-check:
	name: Check access
	permissions: read-all
	runs-on: ubuntu-latest
	outputs:
	approval-env: ${{ steps.auth.outputs.result }}
	steps:
	- name: Check Authorization
	id: auth
	uses: strands-agents/devtools/authorization-check@main
	with:
	skip-check: ${{ github.event_name == 'merge_group' }}
	username: ${{ github.event.pull_request.user.login \|\| 'invalid' }}
	allowed-roles: 'triage,write,admin'

	check-access-and-checkout:
	runs-on: ubuntu-latest
	needs: authorization-check
	environment: ${{ needs.authorization-check.outputs.approval-env }}
	permissions:
	id-token: write
	pull-requests: read
	contents: read
	steps:
	- name: Configure Credentials
	uses: aws-actions/configure-aws-credentials@v5
	with:
	role-to-assume: ${{ secrets.STRANDS_INTEG_TEST_ROLE }}
	aws-region: us-east-1
	mask-aws-account-id: true
	- name: Checkout head commit
	uses: actions/checkout@v6
	with:
	ref: ${{ github.event.pull_request.head.sha }} # Pull the commit from the forked repo
	persist-credentials: false # Don't persist credentials for subsequent actions
	- name: Set up Python
	uses: actions/setup-python@v6
	with:
	python-version: '3.10'
	- name: Install dependencies
	run: \|
	pip install --no-cache-dir hatch
	- name: Run integration tests
	env:
	AWS_REGION: us-east-1
	AWS_REGION_NAME: us-east-1 # Needed for LiteLLM
	STRANDS_TEST_API_KEYS_SECRET_NAME: ${{ secrets.STRANDS_TEST_API_KEYS_SECRET_NAME }}
	id: tests
	run: \|
	hatch test tests_integ

Provide feedback