From 1882332cdb83d4480e4b5eb6cb504faf16f3afcb Mon Sep 17 00:00:00 2001 From: brunograna Date: Wed, 29 May 2024 10:37:16 -0300 Subject: [PATCH] feat: change to use assume role --- .github/workflows/terraform.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml index 6ca2072..0b53b43 100644 --- a/.github/workflows/terraform.yml +++ b/.github/workflows/terraform.yml @@ -26,9 +26,11 @@ jobs: - name: Configure AWS credentials uses: aws-actions/configure-aws-credentials@v4 with: - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - aws-region: ${{ vars.AWS_REGION }} + role-to-assume: arn:aws:iam::179916804929:role/BuildRun-GithubActions-Role #change to reflect your IAM role’s ARN + role-session-name: GitHub_to_AWS_via_FederatedOIDC +# aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} +# aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} +# aws-region: ${{ vars.AWS_REGION }} - name: Read destroy configuration id: read-destroy-config