GHA: permission token #3

Author: Manuel Humberto Colonia Vela [NE]

.github/workflows/apidoc-build.yml

@@ -39,7 +39,13 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 #v6.0.1
         with:
             fetch-depth: 0
-
+      - name: Install AWS CLI
+        run: |
+          sudo apt-get install unzip curl -y
+          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
+          unzip awscliv2.zip
+          sudo ./aws/install --update
+          aws --version
       - name: Setup Node.js
         uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f  #v6.1.0
         with:
@@ -62,16 +68,15 @@ jobs:
 
       - name: Build Make
         run: make build
-
-      - name: deploy to S3 Bucket
-        if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/release'
-        run: |
-          aws s3 sync ${{ env.OUT_DIR }} s3://${{ env.S3_BUCKET }} --acl private --cache-control 'private, max-age:3600' --delete
-          aws s3 cp ${{ env.OUT_DIR }} s3://${{ env.S3_BUCKET }} --recursive --exclude '*' --include '*.html' --acl private --cache-control 'no-cache, no-store'
-
+      
       - name: Deploy to ephemerals - Branch SC
         if: startsWith(github.ref, 'refs/heads/sc-')
         run: |
           aws s3 sync build/staging s3://ephemeral-environments/${{ env.APP }}${{ env.BRANCH_NAME }} --acl public-read --cache-control "private, max-age:3600" --delete
           aws s3 cp build/staging s3://ephemeral-environments/${{ env.APP }}/${{ env.BRANCH_NAME }} --recursive --exclude '*' --include '*.html' --acl public-read --cache-control 'no-cache, no-store'
 
+      - name: Deploy to S3 Bucket
+        if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/release'
+        run: |
+          aws s3 sync ${{ env.OUT_DIR }} s3://${{ env.S3_BUCKET }} --acl private --cache-control 'private, max-age:3600' --delete
+          aws s3 cp ${{ env.OUT_DIR }} s3://${{ env.S3_BUCKET }} --recursive --exclude '*' --include '*.html' --acl private --cache-control 'no-cache, no-store'