Skip to content

Commit b9e12e6

Browse files
authored
fix(integration-test-deployment): Use AssumeRole instead of OIDC
OIDC is not setup in prod, and it isn't needed as we already can use the role in Codebuild to assume the Atmosphere role. setting role-chaining lets the action use AssumeRole instead of OIDC as documented here: https://github.com/aws-actions/configure-aws-credentials?tab=readme-ov-file#other-authentication-scenarios
1 parent 1fb4c78 commit b9e12e6

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

.github/workflows/integration-test-deployment.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ jobs:
4545
role-to-assume: ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }}
4646
role-session-name: run-tests@aws-cdk-deployment-integ
4747
aws-region: us-east-1
48+
role-chaining: true
4849

4950
- name: Setup Node.js
5051
uses: actions/setup-node@v5

0 commit comments

Comments
 (0)