Use AssumeRoleWithWebIdentity to get AWS S3 credentials instead of a …

…seperate configure-aws-credentals action. Co-authored-by: Christopher Jones <christopher.jones@guardian.co.uk>
guardian · Feb 12, 2024 · 87be18a · 87be18a
1 parent 8d7305b
commit 87be18a
Show file tree

Hide file tree

Showing 5 changed files with 39,905 additions and 33,076 deletions.
diff --git a/action.yaml b/action.yaml
@@ -4,6 +4,9 @@ inputs:
   app:
     description: Riff Raff app name. Either this or projectName should be set.
     required: false
+  roleArn:
+    description: Role to assume using AssumeRoleWithWebIdentity with Github OIDC token to upload files to RiffRaff S3 bucket.
+    required: true
   config:
     description: Riff Raff configuration (what would normally go in a riff-raff.yaml file). Use `|` to provide a multiline string here.
     required: false