From b7f8c068d8bf2033568268aacde594ec87c900be Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tarik=20Demirovi=C4=87?= Date: Mon, 6 Nov 2023 09:49:39 +0100 Subject: [PATCH] Update generalized-deployments.yaml to use IAM Role --- .github/workflows/generalized-deployments.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/generalized-deployments.yaml b/.github/workflows/generalized-deployments.yaml index 794a24019..20f0d49dd 100644 --- a/.github/workflows/generalized-deployments.yaml +++ b/.github/workflows/generalized-deployments.yaml @@ -10,14 +10,16 @@ jobs: push: name: Invoke General Docker Build Pipeline runs-on: ubuntu-latest + permissions: + id-token: write + contents: read steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2.2.0 + uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4.0.1 with: - aws-access-key-id: ${{ secrets.GDBP_AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.GDBP_AWS_SECRET_ACCESS_KEY }} + role-to-assume: ${{ secrets.GDBP_AWS_IAM_ROLE_ARN }} aws-region: us-west-2 - name: Generalized Deployments uses: brave-intl/general-docker-build-pipeline-action@a5abec689bc65b6a985ed8527d741a130c1483af # v1.0.11