We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents c2a43d6 + 7f5187a commit a9cc1dbCopy full SHA for a9cc1db
1 file changed
.github/workflows/deploy_backend.yml
@@ -7,6 +7,10 @@ on:
7
- main
8
- stage
9
10
+permissions:
11
+ id-token: write
12
+ contents: read
13
+
14
jobs:
15
deploy:
16
runs-on: ubuntu-latest
@@ -18,6 +22,7 @@ jobs:
18
22
- name: Configure AWS Credentials
19
23
uses: aws-actions/configure-aws-credentials@v4.1.0
20
24
with:
25
+ audience: sts.amazonaws.com
21
26
aws-region: ap-southeast-1
27
role-to-assume: arn:aws:iam::285637954943:role/techtix-github-action-oidc-role
28
role-session-name: GithubActionSession
0 commit comments