File tree Expand file tree Collapse file tree 1 file changed +18
-6
lines changed Expand file tree Collapse file tree 1 file changed +18
-6
lines changed Original file line number Diff line number Diff line change @@ -39,12 +39,24 @@ jobs:
3939 ref : ${{ github.event.pull_request.head.sha }}
4040 fetch-depth : 0
4141
42- - name : Configure AWS credentials
43- uses : aws-actions/configure-aws-credentials@v5
44- with :
45- role-to-assume : ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }}
46- role-session-name : run-tests@aws-cdk-deployment-integ
47- aws-region : us-east-1
42+ - name : Assume Atmosphere Role
43+ id : creds
44+ run : |
45+ # Assume role and capture the JSON output
46+ CREDS=$(aws sts assume-role \
47+ --role-arn ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }} \
48+ --role-session-name run-tests@aws-cdk-deployment-integ)
49+ # Parse the JSON output and set environment variables
50+ AWS_ACCESS_KEY_ID=$(echo $CREDS | jq -r '.Credentials.AccessKeyId')
51+ AWS_SECRET_ACCESS_KEY=$(echo $CREDS | jq -r '.Credentials.SecretAccessKey')
52+ AWS_SESSION_TOKEN=$(echo $CREDS | jq -r '.Credentials.SessionToken')
53+ echo "::add-mask::$AWS_ACCESS_KEY_ID"
54+ echo "::add-mask::$AWS_SECRET_ACCESS_KEY"
55+ echo "::add-mask::$AWS_SESSION_TOKEN"
56+
57+ echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID" >> $GITHUB_ENV
58+ echo "AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY" >> $GITHUB_ENV
59+ echo "AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN" >> $GITHUB_ENV
4860
4961 - name : Setup Node.js
5062 uses : actions/setup-node@v5
You can’t perform that action at this time.
0 commit comments