From 1d9ee8c7a59246dc992d1e5a2fd4482d5777dbfe Mon Sep 17 00:00:00 2001 From: David Ugbero Date: Mon, 6 May 2024 16:07:14 +0100 Subject: [PATCH] update to use iam roles (oidc), no longer access keys --- .github/workflows/deploy-qa.yml | 5 ++--- .github/workflows/deploy-testnet.yml | 7 +++---- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/.github/workflows/deploy-qa.yml b/.github/workflows/deploy-qa.yml index b55fcb4..e1278ae 100644 --- a/.github/workflows/deploy-qa.yml +++ b/.github/workflows/deploy-qa.yml @@ -14,10 +14,9 @@ jobs: uses: actions/checkout@v2 - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v1 + uses: aws-actions/configure-aws-credentials@v4 with: - aws-access-key-id: ${{ secrets.QA_AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.QA_AWS_SECRET_ACCESS_KEY }} + role-to-assume: ${{ secrets.QA_ROLE_ARN }} aws-region: ${{ secrets.QA_AWS_REGION }} - name: Setup Node 16 diff --git a/.github/workflows/deploy-testnet.yml b/.github/workflows/deploy-testnet.yml index 24406bf..2868118 100644 --- a/.github/workflows/deploy-testnet.yml +++ b/.github/workflows/deploy-testnet.yml @@ -15,11 +15,10 @@ jobs: uses: actions/checkout@v2 - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v1 + uses: aws-actions/configure-aws-credentials@v4 with: - aws-access-key-id: ${{ secrets.TESTNET_AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.TESTNET_AWS_SECRET_ACCESS_KEY }} - aws-region: ${{ secrets.TESTNET_AWS_REGION }} + role-to-assume: ${{ secrets.TESTNET_ROLE_ARN }} + aws-region: ${{ secrets.TESTNET_AWS_REGION }}} - name: Setup Node 16 uses: actions/setup-node@v1