Set AWS login to use OIDC

burnt-labs · May 28, 2024 · ce014eb · ce014eb
1 parent 077299a
commit ce014eb
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/aws-ecr.yml b/.github/workflows/aws-ecr.yml
@@ -12,17 +12,19 @@ jobs:
     name: Build Image
     runs-on: ubuntu-latest
     environment: CI
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Check out code
         uses: actions/checkout@v3
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v1
+        uses: aws-actions/configure-aws-credentials@v4
         with:
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           aws-region: us-east-1
+          role-to-assume: ${{ secrets.AWS_OIDC_ROLE }}
 
       - name: Login to Amazon ECR
         id: login-ecr