updated workflow for aws ocid connection

joeygrable94 · Oct 30, 2024 · a8654e7 · a8654e7
1 parent e478016
commit a8654e7
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -77,9 +77,17 @@ jobs:
       CLOUDKEY_AWS_SECRET_ACCESS_KEY: ${{ secrets.CLOUDKEY_AWS_SECRET_ACCESS_KEY }}
       CLOUDKEY_AWS_DEFAULT_REGION: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
       CLOUDKEY_AWS_S3_DEFAULT_BUCKET: ${{ secrets.CLOUDKEY_AWS_S3_DEFAULT_BUCKET }}
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v4
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v3
+        with:
+          role-to-assume: ${{ secrets.AWS_GITHUB_OIDC_ROLE_ARN }}
+          aws-region: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
       - name: Setup Python
         uses: actions/setup-python@v5
         with: