refactor: bring back OIDC

Author: Abogical

.github/workflows/integration-test-deployment.yml

@@ -39,24 +39,12 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
 
-      - name: Assume Atmosphere Role
-        id: creds
-        run: |
-          # Assume role and capture the JSON output
-          CREDS=$(aws sts assume-role \
-          --role-arn ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }} \
-          --role-session-name run-tests@aws-cdk-deployment-integ)
-          # Parse the JSON output and set environment variables
-          AWS_ACCESS_KEY_ID=$(echo $CREDS | jq -r '.Credentials.AccessKeyId')
-          AWS_SECRET_ACCESS_KEY=$(echo $CREDS | jq -r '.Credentials.SecretAccessKey')
-          AWS_SESSION_TOKEN=$(echo $CREDS | jq -r '.Credentials.SessionToken')
-          echo "::add-mask::$AWS_ACCESS_KEY_ID"
-          echo "::add-mask::$AWS_SECRET_ACCESS_KEY"
-          echo "::add-mask::$AWS_SESSION_TOKEN"
-          
-          echo "AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID" >> $GITHUB_ENV
-          echo "AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY" >> $GITHUB_ENV
-          echo "AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN" >> $GITHUB_ENV
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v5
+        with:
+          role-to-assume: ${{ vars.CDK_ATMOSPHERE_OIDC_ROLE }}
+          role-session-name: run-tests@aws-cdk-deployment-integ
+          aws-region: us-east-1
 
       - name: Setup Node.js
         uses: actions/setup-node@v4