{{ message }}
Repository navigation
Support for temporary credential with OIDC #86
Description
This should be in gist but no other place to put it.
This action supports the use of OIDC for authentication
Instead of the AWS Access KEY, which inherits human flaws and cannot be whitelisted
uses: appleboy/lambda-action@v0.2.0
with:
aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws_region: ${{ secrets.AWS_REGION }}
function_name: gorush
zip_file: output.zip
dry_run: true
With OIDC/AUTH2, granular permissions can be given with temporary access.
The example below shows the action used with OIDC support.
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::${{ secrets.awsAccountId }}:role/github-actions-oidc-role
aws-region: ${{ secrets.AWS_REGION }}
- name: Deploy function
uses: appleboy/lambda-action@v0.2.0
with:
function_name: function_name
zip_file: funciton.zip
aws_region: region_name
Activity
[-]Support for temporary credentila support such as OIDC[/-][+]Support for temporary credential with OIDC[/+]