action.yml

name: cert-2-aws-creds
author: Yenlin Chen (hencrice@)
description: >-
  Retrieve temporary AWS credentials using X.509 certificate.
branding:
  icon: cloud
  color: green

inputs: # inputs to this Action
  certificate:
    description: >-
      The the X.509 certificate (i.e. content of the file)
      that will be used when making the call to AWS to retrieve
      temporary credentials
    required: true

  private_key:
    description: >-
      The private key (i.e. content of the file) generated
      from the AWS IoT console. This key will be used when
      making the call to AWS to retrieve temporary credentials
    required: true

  iot_endpoint:
    description: >-
      The AWS account-specific IoT endpoint for retrieving temporary
      credentials. This should be one of the outputs
      after the action infrastructure Cloudformation stack
      is deployed.
    required: true

  aws_iot_role_alias:
    description: >-
      The role alias created for the IAM role that will be assumed by
      this GitHub Action. This should be one of the outputs
      after the action infrastructure Cloudformation stack
      is deployed.
    required: true

outputs: # output will be consumable in later steps in the Github Action workflow
  aws_access_key_id:
    description: >-
      Temporary access key. Can be used to authN/authZ requests
      to AWS
  aws_secret_access_key:
    description: >-
      Temporary secret access key. Can be used to authN/authZ
      requests to AWS
  aws_session_token:
    description: >-
      STS session token. Required to be used along with
      the other temporary cerdentials in this output

runs:
  using: node12
  main: lib/main.js