aws-prod.yml

name: Deploy Backend to Product ECS

on:
  push:
    branches: ["main"]
    paths:
      - .github/workflows/aws-prod.yml
      - server/**
      - petercat_utils/**
      - subscriber/**

env:
  AWS_REGION: ap-northeast-1
  ECR_REPOSITORY: petercat-lambda
  ECR_REGISTRY: 654654285942.dkr.ecr.ap-northeast-1.amazonaws.com

permissions:
  id-token: write   # This is required for requesting the JWT
  contents: read    # This is required for actions/checkout

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: production
    strategy:
      fail-fast: true

    steps:
      - name: Checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::654654285942:role/Github-OIDC
          audience: sts.amazonaws.com
          aws-region: ${{ env.AWS_REGION }}

      # Sync .env from remote    
      - run: |
        pip install -r scripts/requirements.txt
        python scripts/sync_envs.py pull -t .aws/petercat-preview.toml
      # Build inside Docker containers
      - run: sam build --use-container --config-file .aws/petercat-prod.toml

      # Prevent prompts and failure when the stack is unchanged
      - run: |
          sam deploy \
            --no-confirm-changeset \
            --no-fail-on-empty-changeset \
            --config-file .aws/petercat-prod.toml