update to use iam roles (oidc), no longer access keys

rsksmart · May 6, 2024 · 1d9ee8c · 1d9ee8c
1 parent c007d27
commit 1d9ee8c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 7 deletions.
diff --git a/.github/workflows/deploy-qa.yml b/.github/workflows/deploy-qa.yml
@@ -14,10 +14,9 @@ jobs:
       uses: actions/checkout@v2
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@v4
       with:
-        aws-access-key-id: ${{ secrets.QA_AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.QA_AWS_SECRET_ACCESS_KEY }}
+        role-to-assume: ${{ secrets.QA_ROLE_ARN }}
         aws-region: ${{ secrets.QA_AWS_REGION }}
 
     - name: Setup Node 16

diff --git a/.github/workflows/deploy-testnet.yml b/.github/workflows/deploy-testnet.yml
@@ -15,11 +15,10 @@ jobs:
       uses: actions/checkout@v2
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@v4
       with:
-        aws-access-key-id: ${{ secrets.TESTNET_AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.TESTNET_AWS_SECRET_ACCESS_KEY }}
-        aws-region: ${{ secrets.TESTNET_AWS_REGION }}
+        role-to-assume: ${{ secrets.TESTNET_ROLE_ARN }}
+        aws-region: ${{ secrets.TESTNET_AWS_REGION }}}
 
     - name: Setup Node 16
       uses: actions/setup-node@v1