Deploy a static website to AWS S3.

• Deploy to AWS S3
  • Table of Contents
  • Prerequisites
  • Usage
  • Inputs
  • Outputs
  • Example
  • Creating An Identity Provider
    • Create an identity provider in the AWS IAM console
    • Assign a role to the identity provider
  • Dependencies
  • License

1. Create a S3 bucket and enable static website hosting
2. Add a bucket policy to allow public read access to the bucket
3. Creating an identity provider on AWS
4. Assign a role to the identity provider

Add the following permissions to the job or workflow that uses this action.

permissions:
  id-token: write
  contents: read

See: GitHub Documents: Adding permissions settings

- uses: uskayyyyy/gha-s3-deploy@v2
    with:
      role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
      bucket: ${{ secrets.AWS_BUCKET }}}
      region: us-west-2
      folder: ./dist

S3 Deploy's Action supports inputs from the user listed in the table below:

This action provides the following outputs that can be accessed in subsequent steps of your workflow using the steps context.

# .github/workflows/example.yml

name: Example workflow for S3 Deploy
on: push
jobs:
  run:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v4
      - name: Install dependencies
        run: npm ci
      - name: Build
        run: npm run build
      - name: Deploy
        id: deploy
        uses: uskayyyyy/gha-s3-deploy@v2
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
          bucket: ${{ secrets.AWS_BUCKET }}
          region: us-west-2   # Optional - Default: us-east-1
          folder: ./dist      # Optional - Default: . (root)
      - name: Output Website URL
        run: echo ${{ steps.deploy.outputs.website-url }}

1. Navigate to the Identity Providers page in the AWS IAM console
2. Add a provider with the following properties:
   • Provider type: OpenID Connect
   • Provider URL: https://token.actions.githubusercontent.com
   • Audience: sts.amazonaws.com

1. Navigate to the identity provider details page created in the previous step
2. Hit the "Assign role" button
3. Create a new role with the following properties:
   • Trusted entity type: Web identity
   • Identity provider: the identity provider you created in step 3
   • Audience: the audience you specified in step 3
   • GitHub organization: your GitHub username or organization name
4. Add right permissions
5. Name the role and create it
6. Make sure the GitHub identity provider is added to the role's trusted relationships

For more information, see GitHub's documentation

• AWS Configure Credentials Action is used to configure AWS credentials with the provided IAM role.

The code in this project is released under the MIT License.